Thermofisher vulnerabilities
We track 7 vulnerabilities in Thermofisher products across 3 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
Latest Thermofisher vulnerabilities
- 8.4 High severity
Applied Biosystems 3500/3500xL Series Data…: Missing Support for Integrity Check
The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
- 8.8 High severity
Torrent Suite Software: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offline/bundle/upload/ endpoints allow low-privilege users to upload ZIP files to the server. The plupload
- 7.2 High severity
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration par
- 7.8 High severity
Torrent Suite Software: Authentication Bypass by Spoofing
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. One of the middlewares included in this application, LocalhostAuthMiddleware, authenticates users as ionadmin if the REMOTE_ADDR property in request.META is set to 127.0.0.1,
- 9.8 Critical severity
Ion Torrent Onetouch 2 Firmware: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. When they are powered on, an X11 display server is started. The display server listens on all network interfaces and is accessible over port 6000. The X11 access control list,
- 9.8 Critical severity
Torrent Suite Software: Use of Default Credentials
The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API. The ionadmin user account can be used to authenticate to default deployments with the password ionadmin. The user guide
- 9.8 Critical severity
Ion Torrent Onetouch 2 Firmware: Weak Password Requirements
An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not e