Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-1521 EUVD-2022-24819GHSA-hgpf-hf44-725p

3.2.4 IMPROPER ACCESS CONTROL CWE-284

Published Jun 24, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Illumina Product: iSeq 100 Instrument Product: MiniSeq Instrument Product: MiSeq Dx Product: MiSeq Instrument Product: NextSeq 500 Instrumen Product: NextSeq 550 Instrument Product: NextSeq 550Dx

Description

LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or intercept sensitive data.

Affected products

VendorProductAffectedFixed
Illumina NextSeq 550Dx LRM Versions 1.3 to 3.1 —
Illumina MiSeq Dx LRM Versions 1.3 to 3.1 —
Illumina NextSeq 500 Instrumen LRM Versions 1.3 to 3.1 —
Illumina NextSeq 550 Instrument LRM Versions 1.3 to 3.1 —
Illumina MiSeq Instrument LRM Versions 1.3 to 3.1 —
Illumina iSeq 100 Instrument LRM Versions 1.3 to 3.1 —
Illumina MiniSeq Instrument LRM Versions 1.3 to 3.1 —

Advisories 1

References