CVE-2023-1968 - CVE House
Back to Database
Status published Critical CVE-2023-1968

CVE-2023-1968

Vulnerability Description

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-1968

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Illumina reported these vulnerabilities to CISA.

References

More from Illumina

View All →
CVE-2023-1966
CVE-2023-1966
High 7.4

Affected Vendor

Affected Software

iScan Control Software, MiniSeq Control Software, iSeq 100, MiSeq Control Software, MiSeqDx Operating Software, NextSeq 500/550 Control Software, NextSeq 550Dx Control Software, NextSeq 550Dx Operating Software, NextSeq 1000/2000 Control Software, NovaSeq 6000 Control Software, NovaSeq Control Software
Vulnerable Versions:
4.0.0, 4.0.5, 2.0 , All versions, 4.0 (RUO Mode), 4.0.1 , 4.0, 1.0.0 , 1.3.3 , 0, 1.8

Timeline

Official Publish: April 28th, 2023
Last Modified: January 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-1327

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.