3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc. An attacker could also exploit this vulnerability to access APIs not intended for general use and interact through the network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
NextSeq 550Dx
Vendor
Illumina
Product
NextSeq 550Dx
Platforms
Unknown
Default status
Unknown
NextSeq 550Dx · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
LRM Versions 1.3 to 3.1
affected
Unavailable
Unavailable
Unavailable
None listed
MiSeq Dx
Vendor
Illumina
Product
MiSeq Dx
Platforms
Unknown
Default status
Unknown
MiSeq Dx · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
LRM Versions 1.3 to 3.1
affected
Unavailable
Unavailable
Unavailable
None listed
NextSeq 500 Instrument
Vendor
Illumina
Product
NextSeq 500 Instrument
Platforms
Unknown
Default status
Unknown
NextSeq 500 Instrument · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
LRM Versions 1.3 to 3.1
affected
Unavailable
Unavailable
Unavailable
None listed
NextSeq 550 Instrument
Vendor
Illumina
Product
NextSeq 550 Instrument
Platforms
Unknown
Default status
Unknown
NextSeq 550 Instrument · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
LRM Versions 1.3 to 3.1
affected
Unavailable
Unavailable
Unavailable
None listed
MiSeq Instrument
Vendor
Illumina
Product
MiSeq Instrument
Platforms
Unknown
Default status
Unknown
MiSeq Instrument · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
LRM Versions 1.3 to 3.1
affected
Unavailable
Unavailable
Unavailable
None listed
iSeq 100 Instrument
Vendor
Illumina
Product
iSeq 100 Instrument
Platforms
Unknown
Default status
Unknown
iSeq 100 Instrument · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
LRM Versions 1.3 to 3.1
affected
Unavailable
Unavailable
Unavailable
None listed
MiniSeq Instrument
Vendor
Illumina
Product
MiniSeq Instrument
Platforms
Unknown
Default status
Unknown
MiniSeq Instrument · Scoped product and version facts