Nextseq 2000 Firmware CVEs and Security Vulnerabilities

CVE-2023-1966

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Illumina

Products

Iscan Iscan Firmware Iseq 100 and 19 more

CVE-2023-1968

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.

CVSS 3.1 · 10 Critical EPSS 1.8% KEV · Not listed