NextSeq 1000/2000 Control Software vulnerabilities

2 known vulnerabilities in NextSeq 1000/2000 Control Software from Illumina. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  iScan Control Software: Binding to an Unrestricted IP Address

  CVE-2023-1968Apr 28, 2023IlluminaEPSS 1.81%

  Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.

• 9.8 Critical severity

  iScan Control Software: Improper Privilege Management

  CVE-2023-1966Apr 28, 2023Illumina

  Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change set