Description
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Illumina iScan Control Software
Default version status: unaffected
4.0.0affected4.0.5affected
Illumina MiniSeq Control Software
Default version status: unaffected
2.0affected
Illumina iSeq 100
Default version status: unaffected
All versionsaffected
Illumina MiSeq Control Software
Default version status: unaffected
4.0 (RUO Mode)affected
Illumina MiSeqDx Operating Software
Default version status: unaffected
4.0.1affected
Illumina NextSeq 500/550 Control Software
Default version status: unaffected
4.0affected
Illumina NextSeq 550Dx Control Software
Default version status: unaffected
4.0 (RUO Mode)affected
Illumina NextSeq 550Dx Operating Software
Default version status: unaffected
1.0.0 to ≤ 1.3.1affected1.3.3affected
Illumina NextSeq 1000/2000 Control Software
Default version status: unaffected
0 to ≤ 1.4.1affected
Illumina NovaSeq 6000 Control Software
Default version status: unaffected
0 to ≤ 1.7affected
Illumina NovaSeq Control Software
Default version status: unaffected
1.8affected