Arbitrary file upload in Illumina products - CVE-2022-1519
Published: June 3, 2022
Vulnerability identifier: #VU63962
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2022-1519
CWE-ID: CWE-434
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Illumina
Affected software:
In Vitro Diagnostic NextSeq 550Dx
In Vitro Diagnostic MiSeq Dx
NextSeq 500 Instrument
NextSeq 550 Instrument
MiSeq Instrument
iSeq 100 Instrument
MiniSeq Instrument
Local Run Manager (LRM)
In Vitro Diagnostic NextSeq 550Dx
In Vitro Diagnostic MiSeq Dx
NextSeq 500 Instrument
NextSeq 550 Instrument
MiSeq Instrument
iSeq 100 Instrument
MiniSeq Instrument
Local Run Manager (LRM)
Detailed vulnerability description
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to insufficient validation of file during file upload. A remote attacker can upload a malicious file and execute it on the server.
How to mitigate CVE-2022-1519
Install updates from vendor's website.