CVE-2023-1966

—

CVSS 3.1

9.8 critical

EPSS

<1%p58

Published

Apr 28, 2023 (Apr 28, 2023)

Modified

Jun 17, 2026

Description

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

Vendors: illumina
Products: iscan firmware, iseq 100 firmware, miniseq firmware, miseq firmware, miseqdx firmware, nextseq 500 firmware, nextseq 550 firmware, nextseq 550dx firmware, nextseq 1000 firmware, nextseq 2000 firmware, novaseq 6000 firmware
Weakness: CWE-250, CWE-269
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news2 stories

CISA warns of a critical flaw affecting Illumina medical devices

Security AffairsApr 29, 14:39 UTC · Apr 29, 2023Advisory in the wildCVE-2023-1968 CVE-2023-1966

CISA Warns of Critical Flaws in Illumina's DNA Sequencing Instruments

The Hacker NewsApr 29, 04:34 UTC · Apr 29, 2023Advisory in the wildCVE-2023-1968 CVE-2023-1966