CVE-2022-1518

—

CVSS 3.1

9.8 critical

EPSS

2%p74

Published

Jun 24, 2022 (Jun 24, 2022)

Modified

Jun 17, 2026

Description

LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.

Vendors: illumina
Products: local run manager
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news2 stories

CISA Warned About Critical Vulnerabilities in Illumina's DNA Sequencing Devices

The Hacker NewsJun 6, 11:58 UTC · Jun 6, 2022Vulnerability in the wildCVE-2022-1517 CVE-2022-1518 CVE-2022-1519+2 CVEs

60

FDA, CISA warn of vulnerabilities in medical devices used for genetic testing

The RecordJan 13, 00:00 UTC · Jan 13, 2023Vulnerability CVE-2022-1517 CVE-2022-1518 CVE-2022-1519+2 CVEs

47