Skip to content
OpenAdvisories
Critical · 10.0 CVE-2022-1518 EUVD-2022-24816GHSA-gf32-9r48-vxjm

3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22

Published Jun 24, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Illumina Product: iSeq 100 Instrument Product: MiniSeq Instrument Product: MiSeq Dx Product: MiSeq Instrument Product: NextSeq 500 Instrument Product: NextSeq 550 Instrument Product: NextSeq 550Dx

Description

LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.

Affected products

VendorProductAffectedFixed
Illumina NextSeq 550Dx LRM Versions 1.3 to 3.1 —
Illumina MiSeq Dx LRM Versions 1.3 to 3.1 —
Illumina NextSeq 500 Instrument LRM Versions 1.3 to 3.1 —
Illumina NextSeq 550 Instrument LRM Versions 1.3 to 3.1 —
Illumina MiSeq Instrument LRM Versions 1.3 to 3.1 —
Illumina iSeq 100 Instrument LRM Versions 1.3 to 3.1 —
Illumina MiniSeq Instrument LRM Versions 1.3 to 3.1 —

Advisories 1

References