CVE-2023-1968
CVE-2023-1968
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
CVE-2023-1968
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.
- Record
CVE-2023-1968- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-1327
- Updated
- 2026-11-02
EUVDEUVD-2023-24154
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.
- Record
EUVD-2023-24154- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cpwh-2ghx-4jvr
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an...
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.
- Record
GHSA-cpwh-2ghx-4jvr- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-1327
- Updated
- 2026-11-02
NVD
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.
- Record
CVE-2023-1968- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-1327
- Updated
- 2026-11-02
Affected products
- illumina iscan control software
- illumina iscan firmware
- illumina iseq 100
- illumina iseq 100 firmware
- illumina miniseq control software
- illumina miniseq firmware
- illumina miseq control software
- illumina miseq firmware
- illumina miseqdx operating software
- illumina miseqdx firmware
- illumina nextseq 1000/2000 control software
- illumina nextseq 500/550 control software
Show 10 moreShow less
- illumina nextseq 550dx control software
- illumina nextseq 550dx operating software
- illumina nextseq 1000 firmware
- illumina nextseq 2000 firmware
- illumina nextseq 500 firmware
- illumina nextseq 550 firmware
- illumina nextseq 550dx firmware
- illumina novaseq 6000 control software
- illumina novaseq control software
- illumina novaseq 6000 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-1968 is a critical vulnerability (CVSS 10.0) in Illumina Iscan Control Software, published April 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. No source names a fixed version.