Multiple vulnerabilities in Illumina Local Run Manager

1) Execution with unnecessary privileges

EUVDB-ID: #VU63959

Risk: High

CVSSv3.1: 8.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-1517

CWE-ID: CWE-250 - Execution with Unnecessary Privileges

Exploit availability: No

Description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application binary has a setuid bit. A remote attacker can run the affected binary and execute arbitrary code on the system with root privileges.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

In Vitro Diagnostic NextSeq 550Dx: All versions

In Vitro Diagnostic MiSeq Dx: All versions

NextSeq 500 Instrument: All versions

NextSeq 550 Instrument: All versions

MiSeq Instrument: All versions

iSeq 100 Instrument: All versions

MiniSeq Instrument: All versions

Local Run Manager (LRM): 1.3 - 3.1

External links

http://ics-cert.us-cert.gov/advisories/icsa-22-153-02

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Path traversal

EUVDB-ID: #VU63960

Risk: High

CVSSv3.1: 8.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-1518

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote attacker can send a specially crafted HTTP request and upload outside the intended directory structure.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

In Vitro Diagnostic NextSeq 550Dx: All versions

In Vitro Diagnostic MiSeq Dx: All versions

NextSeq 500 Instrument: All versions

NextSeq 550 Instrument: All versions

MiSeq Instrument: All versions

iSeq 100 Instrument: All versions

MiniSeq Instrument: All versions

Local Run Manager (LRM): 1.3 - 3.1

External links

http://ics-cert.us-cert.gov/advisories/icsa-22-153-02

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Arbitrary file upload

EUVDB-ID: #VU63962

Risk: High

CVSSv3.1: 8.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-1519

CWE-ID: CWE-434 - Unrestricted Upload of File with Dangerous Type

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to insufficient validation of file during file upload. A remote attacker can upload a malicious file and execute it on the server.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

In Vitro Diagnostic NextSeq 550Dx: All versions

In Vitro Diagnostic MiSeq Dx: All versions

NextSeq 500 Instrument: All versions

NextSeq 550 Instrument: All versions

MiSeq Instrument: All versions

iSeq 100 Instrument: All versions

MiniSeq Instrument: All versions

Local Run Manager (LRM): 1.3 - 3.1

External links

http://ics-cert.us-cert.gov/advisories/icsa-22-153-02

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Improper access control

EUVDB-ID: #VU63963

Risk: High

CVSSv3.1: 7.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-1521

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote attacker can bypass implemented security restrictions and inject, replay, modify, and/or intercept sensitive data.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

In Vitro Diagnostic NextSeq 550Dx: All versions

In Vitro Diagnostic MiSeq Dx: All versions

NextSeq 500 Instrument: All versions

NextSeq 550 Instrument: All versions

MiSeq Instrument: All versions

iSeq 100 Instrument: All versions

MiniSeq Instrument: All versions

Local Run Manager (LRM): 1.3 - 3.1

External links

http://ics-cert.us-cert.gov/advisories/icsa-22-153-02

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Cleartext transmission of sensitive information

EUVDB-ID: #VU63964

Risk: Medium

CVSSv3.1: 5.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-1524

CWE-ID: CWE-319 - Cleartext Transmission of Sensitive Information

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to software uses insecure communication channel to transmit sensitive information. A remote attacker with ability to intercept network traffic can gain access to sensitive data.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

In Vitro Diagnostic NextSeq 550Dx: All versions

In Vitro Diagnostic MiSeq Dx: All versions

NextSeq 500 Instrument: All versions

NextSeq 550 Instrument: All versions

MiSeq Instrument: All versions

iSeq 100 Instrument: All versions

MiniSeq Instrument: All versions

Local Run Manager (LRM): 1.3 - 3.1

External links

http://ics-cert.us-cert.gov/advisories/icsa-22-153-02

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.