PatchTheCVEillumina vulnerabilities
Recent CVEs affecting illumina products. 7 tracked.
illumina has 7 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-04-28. Highest priority: CVE-2023-1968 (score 60/100).
- CVE-2023-1968 CRITICAL 10.0 MITIGATE MITIGATE Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP add
- CVE-2023-1966 HIGH 7.4 MITIGATE MITIGATE Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability
- CVE-2022-1524 HIGH 7.4 UPGRADE LRM version 2.4 and lower does not implement TLS encryption
- CVE-2022-1521 CRITICAL 9.1 UPGRADE LRM does not implement authentication or authorization by default
- CVE-2022-1519 CRITICAL 10.0 UPGRADE LRM does not restrict the types of files that can be uploaded to the affected product
- CVE-2022-1518 CRITICAL 10.0 UPGRADE LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intend
- CVE-2022-1517 CRITICAL 10.0 UPGRADE LRM utilizes elevated privileges
FAQ
How do I fix illumina vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is illumina being exploited right now?
None of the tracked illumina CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which illumina CVE should I patch first?
CVE-2023-1968 currently ranks highest (60/100): Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP add.