← Back

CVE-2023-1966

nvd nist
Published: Apr 28, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

Affected (16)

Illumina
11 products
Iscan Firmware
Iseq 100 Firmware
Miniseq Firmware
Miseq Firmware
Miseqdx Firmware
Nextseq 500 Firmware
Nextseq 550 Firmware
Nextseq 550dx Firmware
Nextseq 1000 Firmware
Nextseq 2000 Firmware
Novaseq 6000 Firmware
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Illumina
Iscan Firmware
Version 4.0.0
Iscan Firmware
Version 4.0.5
Running on/withPlatform Versions
Illumina
Iscan
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Iseq 100 Firmware
All versions
Running on/withPlatform Versions
Illumina
Iseq 100
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Miniseq Firmware
From 2.0
Running on/withPlatform Versions
Illumina
Miniseq
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Miseq Firmware
From 4.0
Running on/withPlatform Versions
Illumina
Miseq
All versions
Configuration E
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Illumina
Miseqdx Firmware
From 4.0.1
Miseqdx Firmware
Version 4.0
Running on/withPlatform Versions
Illumina
Miseqdx
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nextseq 500 Firmware
Version 4.0
Running on/withPlatform Versions
Illumina
Nextseq 500
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nextseq 550 Firmware
Version 4.0
Running on/withPlatform Versions
Illumina
Nextseq 550
All versions
Configuration H
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Illumina
Nextseq 550dx Firmware
From 1.0.0 to 1.3.1
Nextseq 550dx Firmware
From 1.3.3
Nextseq 550dx Firmware
Version 4.0
Running on/withPlatform Versions
Illumina
Nextseq 550dx
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nextseq 1000 Firmware
Version 1.4.1
Running on/withPlatform Versions
Illumina
Nextseq 1000
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nextseq 2000 Firmware
Version 1.4.1
Running on/withPlatform Versions
Illumina
Nextseq 2000
All versions
Configuration K
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Illumina
Novaseq 6000 Firmware
Up to 1.7
Novaseq 6000 Firmware
Version 1.8
Running on/withPlatform Versions
Illumina
Novaseq 6000
All versions

Related CWEs

CWE-250
Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (4)

Source: ics-cert@hq.dhs.gov
Vendor Advisory
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.