← Database

CVE-2023-1966

HIGH CVSS: 7.4 Published: 2023-04-28 Modified: 2026-06-17

Description

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

Affected Platforms

Illumina Iscan FirmwareIllumina Iseq 100Illumina Nextseq 1000Illumina Novaseq 6000 FirmwareIllumina Nextseq 2000 FirmwareIllumina Miseqdx FirmwareIllumina Nextseq 550 FirmwareIllumina Iseq 100 FirmwareIllumina MiseqdxIllumina Nextseq 2000

Weakness Type

CWE-250, CWE-269

References