CVE-2023-1966: high-severity vulnerability in Illumina iScan Control Software
CVE-2023-1966
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.4epss 0.9%
Instruments with Illumina Universal Copy Service v1.x and
v2.x contain an unnecessary privileges vulnerability. An unauthenticated
malicious actor could upload and execute code remotely at the operating system
level, which could allow an attacker to change settings, configurations,
software, or access sensitive data on the affected product.
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Illumina · iScan Control SoftwareIllumina · iSeq 100Illumina · MiniSeq Control SoftwareIllumina · MiSeq Control SoftwareIllumina · MiSeqDx Operating SoftwareIllumina · NextSeq 1000/2000 Control SoftwareIllumina · NextSeq 500/550 Control SoftwareIllumina · NextSeq 550Dx Control SoftwareIllumina · NextSeq 550Dx Operating SoftwareIllumina · NovaSeq 6000 Control SoftwareIllumina · NovaSeq Control SoftwareRelated CVEs — Illumina iScan Control Software
In the same product, most dangerous first.