CVE-2023-1966 HIGH

CVE-2023-1966: CVE-2023-1966

Vendor Illumina
Product iScan Control Software
Weakness CWE-250
Published April 28, 2023
Last update January 16, 2025

CVSS base score

7.4/10
Attack vector Physical
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

Key dates

02Disclosure timeline

April 28, 2023 CVE published
January 16, 2025 Record updated