CVE-2022-1518 CRITICAL

CVE-2022-1518: 3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22

Vendor Illumina
Product NextSeq 550Dx
Weakness CWE-22 · Path traversal
Published June 24, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.

Key dates

02Disclosure timeline

June 24, 2022 CVE published
April 16, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-55607 Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution CVE-2026-12243 Path Traversal via Percent-Encoding in nltk.data.find() and nltk.data.load() CVE-2026-44017 Docling: Unsafe Zip Extraction in EasyOCR Model Download CVE-2026-48313 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CVE-2026-47896 Apache Lucene.Net: Unauthenticated arbitrary file read on the Lucene.Net.Replicator replication server