Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2022-1518

3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22

Description

LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Illumina NextSeq 550Dx

  • LRM Versions 1.3 to 3.1affected

Illumina MiSeq Dx

  • LRM Versions 1.3 to 3.1affected

Illumina NextSeq 500 Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina NextSeq 550 Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina MiSeq Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina iSeq 100 Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina MiniSeq Instrument

  • LRM Versions 1.3 to 3.1affected

References