Iseq 100 Instrument
Approved changes feed: RSS · Atom
cpe:2.3:a:illumina:iseq_100_instrument:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Illumina (da09275d-4bc3-59a1-a066-fcc6c68298a7) |
|---|---|
| Product | Iseq 100 Instrument (f0ae0f14-9387-57af-b74e-3b6801302888) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-1524 |
vulnerable | 2026-06-03 14:45:59.059878 |
3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
HIGH (7.4)
LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credentials.
Published: 2022-06-24T15:00:16.330Z
Updated: 2025-04-16T17:52:17.725Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1521 |
vulnerable | 2026-06-03 14:45:59.054109 |
3.2.4 IMPROPER ACCESS CONTROL CWE-284
CRITICAL (9.1)
LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or intercept sensitive data.
Published: 2022-06-24T15:00:15.565Z
Updated: 2025-04-16T16:16:46.654Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1519 |
vulnerable | 2026-06-03 14:45:59.049109 |
Details available
CRITICAL (10)
LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including executable code that allows for a remote code exploit.
Published: 2022-06-24T15:00:13.721Z
Updated: 2025-04-16T16:17:02.637Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1518 |
vulnerable | 2026-06-03 14:45:59.048272 |
3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22
CRITICAL (10)
LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.
Published: 2022-06-24T15:00:14.741Z
Updated: 2025-04-16T16:16:54.839Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1517 |
vulnerable | 2026-06-03 14:45:59.042148 |
3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
CRITICAL (10)
LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc. An attacker could also exploit this vulnerability to access APIs not intended for general use and interact through the network.
Published: 2022-06-24T15:00:12.934Z
Updated: 2025-04-16T16:17:11.157Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.