Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2022-1519

LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including executable code that allows for a remot

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including executable code that allows for a remote code exploit.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Illumina NextSeq 550Dx

  • LRM Versions 1.3 to 3.1affected

Illumina MiSeq Dx

  • LRM Versions 1.3 to 3.1affected

Illumina NextSeq 500 Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina NextSeq 550 Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina MiSeq Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina iSeq 100 Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina MiniSeq Instrument

  • LRM Versions 1.3 to 3.1affected

References