CVE-2023-1966
CVE-2023-1966
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
CVE-2023-1966
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.
- Record
CVE-2023-1966- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-250
- Updated
- 2026-11-02
EUVDEUVD-2023-24152
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.
- Record
EUVD-2023-24152- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v566-5q2w-h94w
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges...
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.
- Record
GHSA-v566-5q2w-h94w- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-250, CWE-269
- Updated
- 2026-11-02
NVD
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.
- Record
CVE-2023-1966- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-250, CWE-269
- Updated
- 2026-11-02
Affected products
- illumina iscan control software
- illumina iscan firmware
- illumina iseq 100
- illumina iseq 100 firmware
- illumina miniseq control software
- illumina miniseq firmware
- illumina miseq control software
- illumina miseq firmware
- illumina miseqdx operating software
- illumina miseqdx firmware
- illumina nextseq 1000/2000 control software
- illumina nextseq 500/550 control software
Show 10 moreShow less
- illumina nextseq 550dx control software
- illumina nextseq 550dx operating software
- illumina nextseq 1000 firmware
- illumina nextseq 2000 firmware
- illumina nextseq 500 firmware
- illumina nextseq 550 firmware
- illumina nextseq 550dx firmware
- illumina novaseq 6000 control software
- illumina novaseq control software
- illumina novaseq 6000 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-1966 is a high vulnerability (CVSS 7.4) in Illumina Iscan Control Software, published April 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.92%, the 60th percentile. No source names a fixed version.