Back to Database
Status published
Critical
CVE-2022-1521
3.2.4 IMPROPER ACCESS CONTROL CWE-284
Vulnerability Description
LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or intercept sensitive data.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1521
Credits & Attribution
No credits recorded in the NVD database.
More from Illumina
View All →CVE-2022-1524
3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
High
7.4
CVE-2022-1519
LRM does not restrict the types of files that can...
Critical
10
CVE-2022-1518
3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22
Critical
10
CVE-2022-1517
3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
Critical
10
Affected Vendor
Illumina
View all reports →Affected Software
NextSeq 550Dx, MiSeq Dx, NextSeq 500 Instrumen, NextSeq 550 Instrument, MiSeq Instrument, iSeq 100 Instrument, MiniSeq Instrument
Vulnerable Versions:
LRM Versions 1.3 to 3.1
Timeline
Official Publish:
June 24th, 2022
Last Modified:
April 16th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N