Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2022-1521

3.2.4 IMPROPER ACCESS CONTROL CWE-284

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or intercept sensitive data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Illumina NextSeq 550Dx

  • LRM Versions 1.3 to 3.1affected

Illumina MiSeq Dx

  • LRM Versions 1.3 to 3.1affected

Illumina NextSeq 500 Instrumen

  • LRM Versions 1.3 to 3.1affected

Illumina NextSeq 550 Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina MiSeq Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina iSeq 100 Instrument

  • LRM Versions 1.3 to 3.1affected

Illumina MiniSeq Instrument

  • LRM Versions 1.3 to 3.1affected

References