CVE-2022-1517 3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
Unauthenticated attackers can execute code with elevated privileges on Illumina sequencing instruments, allowing full system control and data access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-1517?
CVE-2022-1517 is a critical vulnerability in Illumina MiSeq Dx, published on 24 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc. An attacker could also exploit this vulnerability to access APIs not intended for general use and interact through the network.
Which versions are affected by CVE-2022-1517?
It affects 1 product.
Products include Illumina Local Run Manager.
How do I fix CVE-2022-1517?
No fix has been published for CVE-2022-1517 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-1517 being exploited?
There is no known exploitation of CVE-2022-1517 in the wild and no public exploit code.
Other vulnerabilities in Illumina MiSeq Dx
Sources
Also known as GHSA-xwwx-p8gv-wf69.