CVE-2023-1966 - CVE House
Back to Database
Status published High CVE-2023-1966

CVE-2023-1966

Vulnerability Description

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-1966

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Illumina reported these vulnerabilities to CISA.

References

More from Illumina

View All →
CVE-2023-1968
CVE-2023-1968
Critical 10

Affected Vendor

Affected Software

iScan Control Software, MiniSeq Control Software, iSeq 100, MiSeq Control Software, MiSeqDx Operating Software, NextSeq 500/550 Control Software, NextSeq 550Dx Control Software, NextSeq 550Dx Operating Software, NextSeq 1000/2000 Control Software, NovaSeq 6000 Control Software, NovaSeq Control Software
Vulnerable Versions:
4.0.0, 4.0.5, 2.0 , All versions, 4.0 (RUO Mode), 4.0.1 , 4.0, 1.0.0 , 1.3.3 , 0, 1.8

Timeline

Official Publish: April 28th, 2023
Last Modified: January 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-250

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1548 Abuse Elevation Control Mechanism
Defense Evasion
T1078 Valid Accounts
Persistence
T1574 Hijack Execution Flow
Privilege Escalation
T1485 Data Destruction
Impact