Illumina MiniSeq

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:illumina:miniseq:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorIllumina (da09275d-4bc3-59a1-a066-fcc6c68298a7)
ProductMiniseq (b47ea5b5-2114-5449-a906-57d06d256915)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1968 not_vulnerable 2026-06-03 14:48:56.790487 CVE-2023-1968
CRITICAL (10)
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.
Published: 2023-04-28T18:09:17.372Z
Updated: 2025-01-16T21:35:22.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1966 not_vulnerable 2026-06-03 14:48:56.774409 CVE-2023-1966
HIGH (7.4)
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.
Published: 2023-04-28T18:06:51.431Z
Updated: 2025-01-16T21:35:30.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1524 not_vulnerable 2026-06-03 14:45:59.059947 3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
HIGH (7.4)
LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credentials.
Published: 2022-06-24T15:00:16.330Z
Updated: 2025-04-16T17:52:17.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1521 not_vulnerable 2026-06-03 14:45:59.054187 3.2.4 IMPROPER ACCESS CONTROL CWE-284
CRITICAL (9.1)
LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or intercept sensitive data.
Published: 2022-06-24T15:00:15.565Z
Updated: 2025-04-16T16:16:46.654Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1519 not_vulnerable 2026-06-03 14:45:59.049182 Details available
CRITICAL (10)
LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including executable code that allows for a remote code exploit.
Published: 2022-06-24T15:00:13.721Z
Updated: 2025-04-16T16:17:02.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1518 not_vulnerable 2026-06-03 14:45:59.048343 3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22
CRITICAL (10)
LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.
Published: 2022-06-24T15:00:14.741Z
Updated: 2025-04-16T16:16:54.839Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1517 not_vulnerable 2026-06-03 14:45:59.044950 3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
CRITICAL (10)
LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc. An attacker could also exploit this vulnerability to access APIs not intended for general use and interact through the network.
Published: 2022-06-24T15:00:12.934Z
Updated: 2025-04-16T16:17:11.157Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.