VULNERABILITY INTELLIGENCE

CVE-2023-1966

CVSS score7.4 HIGH

EPSS probability0.92%

CISA KEVNot currently listed

Published2023-04-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

Weakness classification

CWE-250: Execution with Unnecessary Privileges
CWE-269: Improper Privilege Management

Primary references

ics-cert@hq.dhs.gov — Vendor Advisory
ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource