Skip to content
OpenAdvisories
High · 7.4 CVE-2022-1524 EUVD-2022-24822GHSA-qqpc-gc88-ff86

3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319

Published Jun 24, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Illumina Product: iSeq 100 Instrument Product: MiniSeq Instrument Product: MiSeq Dx Product: MiSeq Instrument Product: NextSeq 500 Instrument Product: NextSeq 550 Instrument Product: NextSeq 550Dx

Description

LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credentials.

Affected products

VendorProductAffectedFixed
Illumina NextSeq 550Dx LRM Versions 1.3 to 3.1 —
Illumina MiSeq Dx LRM Versions 1.3 to 3.1 —
Illumina NextSeq 500 Instrument LRM Versions 1.3 to 3.1 —
Illumina NextSeq 550 Instrument LRM Versions 1.3 to 3.1 —
Illumina MiSeq Instrument LRM Versions 1.3 to 3.1 —
Illumina iSeq 100 Instrument LRM Versions 1.3 to 3.1 —
Illumina MiniSeq Instrument LRM Versions 1.3 to 3.1 —

Advisories 1

References