CVE-2022-1517 3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250

2022-06-0200:00:00

CWE-250

icscert

www.cve.org

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.1%

JSON

LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc. An attacker could also exploit this vulnerability to access APIs not intended for general use and interact through the network.

CNA Affected

[
  {
    "product": "NextSeq 550Dx",
    "vendor": "Illumina",
    "versions": [
      {
        "status": "affected",
        "version": "LRM Versions 1.3 to 3.1"
      }
    ]
  },
  {
    "product": "MiSeq Dx",
    "vendor": "Illumina",
    "versions": [
      {
        "status": "affected",
        "version": "LRM Versions 1.3 to 3.1"
      }
    ]
  },
  {
    "product": "NextSeq 500 Instrument",
    "vendor": "Illumina",
    "versions": [
      {
        "status": "affected",
        "version": "LRM Versions 1.3 to 3.1"
      }
    ]
  },
  {
    "product": "NextSeq 550 Instrument",
    "vendor": "Illumina",
    "versions": [
      {
        "status": "affected",
        "version": "LRM Versions 1.3 to 3.1"
      }
    ]
  },
  {
    "product": "MiSeq Instrument",
    "vendor": "Illumina",
    "versions": [
      {
        "status": "affected",
        "version": "LRM Versions 1.3 to 3.1"
      }
    ]
  },
  {
    "product": "iSeq 100 Instrument",
    "vendor": "Illumina",
    "versions": [
      {
        "status": "affected",
        "version": "LRM Versions 1.3 to 3.1"
      }
    ]
  },
  {
    "product": "MiniSeq Instrument",
    "vendor": "Illumina",
    "versions": [
      {
        "status": "affected",
        "version": "LRM Versions 1.3 to 3.1"
      }
    ]
  }
]