GCVE - cpe:2.3:h:illumina:nextseq_500:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:illumina:nextseq_500:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Illumina (`da09275d-4bc3-59a1-a066-fcc6c68298a7`)
Product	Nextseq 500 (`045987eb-844a-5f23-b13f-309a5030bf71`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-1968`	not_vulnerable	2026-06-03 14:48:56.790604	CVE-2023-1968 CRITICAL (10) Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications. Published: 2023-04-28T18:09:17.372Z Updated: 2025-01-16T21:35:22.697Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-117-01 https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1966`	not_vulnerable	2026-06-03 14:48:56.778942	CVE-2023-1966 HIGH (7.4) Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product. Published: 2023-04-28T18:06:51.431Z Updated: 2025-01-16T21:35:30.057Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-117-01 https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1524`	not_vulnerable	2026-06-03 14:45:59.059996	3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319 HIGH (7.4) LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credentials. Published: 2022-06-24T15:00:16.330Z Updated: 2025-04-16T17:52:17.725Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-153-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1521`	not_vulnerable	2026-06-03 14:45:59.054235	3.2.4 IMPROPER ACCESS CONTROL CWE-284 CRITICAL (9.1) LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or intercept sensitive data. Published: 2022-06-24T15:00:15.565Z Updated: 2025-04-16T16:16:46.654Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-153-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1519`	not_vulnerable	2026-06-03 14:45:59.049233	Details available CRITICAL (10) LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including executable code that allows for a remote code exploit. Published: 2022-06-24T15:00:13.721Z Updated: 2025-04-16T16:17:02.637Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-153-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1518`	not_vulnerable	2026-06-03 14:45:59.048392	3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22 CRITICAL (10) LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure. Published: 2022-06-24T15:00:14.741Z Updated: 2025-04-16T16:16:54.839Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-153-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1517`	not_vulnerable	2026-06-03 14:45:59.046567	3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250 CRITICAL (10) LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc. An attacker could also exploit this vulnerability to access APIs not intended for general use and interact through the network. Published: 2022-06-24T15:00:12.934Z Updated: 2025-04-16T16:17:11.157Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-153-02	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.