Illumina Local Run Manager

🗓️ 02 Jun 2022 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 164 Views

Illumina LRM Update A: Path Traversal, Unrestricted File Upload, Improper Access Contro

Reporter	Title	Published	Views	Family All 55
BDU FSTEC	The vulnerability of the Illumina Local Run Manager software exists due to an incorrect limitation on the path to the restricted access directory. This allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	29 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Illumina Local Run Manager software lies in the lack of restrictions on file downloads, which allows a hacker to execute arbitrary code.	1 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Illumina Local Run Manager software, related to improper code generation management, allows a malicious actor to execute arbitrary code, modify settings, configurations, software, or gain access to confidential data of the affected product.	4 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Illumina Local Run Manager software lies in the absence of an authentication process, which allows attackers to infiltrate, replicate, modify, and/or intercept confidential data.	24 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the TLS protocol implementation in the Illumina Local Run Manager software allows a perpetrator to compromise the confidentiality of protected information, including login credentials.	24 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-1517	24 Jun 202218:31	–	circl
Circl	CVE-2022-1518	24 Jun 202218:30	–	circl
Circl	CVE-2022-1524	24 Jun 202218:31	–	circl
CNNVD	Illumina Local Run Manager 安全漏洞	2 Jun 202200:00	–	cnnvd
CNNVD	Illumina Local Run Manager 访问控制错误漏洞	2 Jun 202200:00	–	cnnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-153-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-22-153-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

02 Jun 2022 00:00Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8 - 10

CVSS 210

EPSS0.00551

SSVC

illumina local run manager path traversal unrestricted upload improper access control vulnerabilities icsa-22-153-02 remote exploit