CVE-2023-1966

🗓️ 28 Apr 2023 18:06:51Reported by icscertType

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability allowing remote code execution

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-1966	30 Apr 202300:24	–	circl
CNNVD	Illumina Universal Copy Service 安全漏洞	28 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-1966 CVE-2023-1966	28 Apr 202318:06	–	cvelist
EUVD	EUVD-2023-24152	3 Oct 202520:07	–	euvd
ICS	Illumina Universal Copy Service	28 Apr 202318:53	–	ics
NVD	CVE-2023-1966	28 Apr 202319:15	–	nvd
OSV	CVE-2023-1966	28 Apr 202319:15	–	osv
Prion	Code injection	28 Apr 202319:15	–	prion
RedhatCVE	CVE-2023-1966	23 May 202505:04	–	redhatcve
The Hacker News	CISA Warns of Critical Flaws in Illumina's DNA Sequencing Instruments	29 Apr 202304:34	–	thn

NVD

Vulners

Node

illumina iscan_firmwareMatch4.0.0

illumina iscan_firmwareMatch4.0.5

AND

illumina iscanMatch-

Node

illumina iseq_100_firmware

AND

illumina iseq_100Match-

Node

illumina miniseq_firmwareRange2.0≥

AND

illumina miniseqMatch-

Node

illumina miseq_firmwareRange4.0≥

AND

illumina miseqMatch-

Node

illumina miseqdx_firmwareRange4.0.1≥-

illumina miseqdx_firmwareMatch4.0ruo

AND

illumina miseqdxMatch-

Node

illumina nextseq_500_firmwareMatch4.0

AND

illumina nextseq_500Match-

Node

illumina nextseq_550_firmwareMatch4.0

AND

illumina nextseq_550Match-

Node

illumina nextseq_550dx_firmwareRange1.0.0–1.3.1-

illumina nextseq_550dx_firmwareRange1.3.3≥-

illumina nextseq_550dx_firmwareMatch4.0ruo

AND

illumina nextseq_550dxMatch-

Node

illumina nextseq_1000_firmwareMatch1.4.1

AND

illumina nextseq_1000Match-

Node

illumina nextseq_2000_firmwareMatch1.4.1

AND

illumina nextseq_2000Match-

Node

illumina novaseq_6000_firmwareRange≤1.7

illumina novaseq_6000_firmwareMatch1.8

AND

illumina novaseq_6000Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "iScan Control Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0"
      },
      {
        "status": "affected",
        "version": "4.0.5"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniSeq Control Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "status": "affected",
        "version": "2.0 "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "iSeq 100",
    "vendor": "Illumina ",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiSeq Control Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "status": "affected",
        "version": "4.0 (RUO Mode)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiSeqDx Operating Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.1 "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NextSeq 500/550 Control Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "status": "affected",
        "version": "4.0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NextSeq 550Dx Control Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "status": "affected",
        "version": "4.0 (RUO Mode)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NextSeq 550Dx Operating Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "lessThanOrEqual": "1.3.1",
        "status": "affected",
        "version": "1.0.0 ",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.3.3 "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NextSeq 1000/2000 Control Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "lessThanOrEqual": "1.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NovaSeq 6000 Control Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "lessThanOrEqual": "1.7 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NovaSeq Control Software",
    "vendor": "Illumina ",
    "versions": [
      {
        "status": "affected",
        "version": "1.8"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-23-117-01
support	www.support.illumina.com/downloads/illumina-universal-copy-service-1-0.html

21 Nov 2024 07:40Current

8.8High risk

Vulners AI Score8.8

CVSS 3.17.4 - 9.8

EPSS0.00319

SSVC