CVE-2023-1968
Critical
Description
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.
SeverityCritical
CVSS10.0
Exploit probability—
ProductIllumina Iscan Firmware
PublishedApr 28, 2023
First seenApr 28, 2023
Weakness typeCWE-1327CWE-1327
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| illumina iscan_firmware | 4.0.0, 4.0.5 | — |
| illumina iseq_100_firmware | No range specified | — |
| illumina miniseq_firmware | 2.0 ≤ v | — |
| illumina miseq_firmware | 4.0 ≤ v | — |
| illumina miseqdx_firmware | 4.0.1 ≤ v, 4.0 | — |
| illumina nextseq_500_firmware | 4.0 | — |
| illumina nextseq_550_firmware | 4.0 | — |
| illumina nextseq_550dx_firmware | 1.0.0 ≤ v ≤ 1.3.1, 1.3.3 ≤ v, 4.0 | — |
| illumina nextseq_1000_firmware | 1.4.1 | — |
| illumina nextseq_2000_firmware | 1.4.1 | — |
| illumina novaseq_6000_firmware | v ≤ 1.7, 1.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.