Illumina vulnerabilities
We track 4 vulnerabilities in Illumina products across 30 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 28, 2023.
Latest Illumina vulnerabilities
- 7.5 High severity
iScan Control Software: Binding to an Unrestricted IP Address
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.
- 9.8 Critical severity
iScan Control Software: Improper Privilege Management
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change set
- 9.8 Critical severity
NextSeq 550Dx: Unrestricted Upload of File with Dangerous Type
LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including executable code that allows for a remote code exploit.
- 9.8 Critical severity
NextSeq 550Dx: Improper Privilege Management
LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc.