CVE Vulnerabilities

CVE-2023-1968

Published: Apr 28, 2023 | Modified: May 09, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.

Affected Software

Name Vendor Start Version End Version
Iscan_firmware Illumina 4.0.0 (including) 4.0.0 (including)
Iscan_firmware Illumina 4.0.5 (including) 4.0.5 (including)

References