Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2023-1968

CVE-2023-1968

Description

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Illumina iScan Control Software

Default version status: unaffected

  • 4.0.0affected
  • 4.0.5affected

Illumina MiniSeq Control Software

Default version status: unaffected

  • 2.0 affected

Illumina iSeq 100

Default version status: unaffected

  • All versionsaffected

Illumina MiSeq Control Software

Default version status: unaffected

  • 4.0 (RUO Mode)affected

Illumina MiSeqDx Operating Software

Default version status: unaffected

  • 4.0.1 affected

Illumina NextSeq 500/550 Control Software

Default version status: unaffected

  • 4.0affected

Illumina NextSeq 550Dx Control Software

Default version status: unaffected

  • 4.0 (RUO Mode)affected

Illumina NextSeq 550Dx Operating Software

Default version status: unaffected

  • 1.0.0 to ≤ 1.3.1affected
  • 1.3.3 affected

Illumina NextSeq 1000/2000 Control Software

Default version status: unaffected

  • 0 to ≤ 1.4.1affected

Illumina NovaSeq 6000 Control Software

Default version status: unaffected

  • 0 to ≤ 1.7 affected

Illumina NovaSeq Control Software

Default version status: unaffected

  • 1.8affected

References