CVE-2023-1968

highpriority · track · 31EPSS 0.018 · 79 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.81% (79th) EPSS

CVSS 7.5 · high

Is it mine?

70 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedMiSeq Control Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixedMiSeqDx Operating Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixedMiniSeq Control Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixedNextSeq 1000/2000 Control Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixedNextSeq 500/550 Control Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixedNextSeq 550Dx Control Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixedNextSeq 550Dx Operating Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixedNovaSeq 6000 Control Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixedNovaSeq Control Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixediScan Control Softwarecisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html
FixediSeq 100cisa_csaf_ot
Illumina recommends using the UCS Vulnerability Instructions Guide based on the user�s specific system configuration to mitigate the vulnerabilities. Illumina recommends users read the instructions before downloading any software.
https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.9–10

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.010criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · CISA US

v3.110criticalAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USexploitability 3.9 · impact 6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1327USCWE-1327USCWE-1327US

affected products (70)

Products and version ranges known to be affected.

MiSeq Control Software: 4.0all versionscisa_csaf_otUS
MiSeqDx Operating Software: >= 4.0.1all versionscisa_csaf_otUS
MiniSeq Control Software: >= 2.0all versionscisa_csaf_otUS
NextSeq 1000/2000 Control Software: <= 1.4.1all versionscisa_csaf_otUS
NextSeq 500/550 Control Software: 4.0all versionscisa_csaf_otUS
NextSeq 550Dx Control Software: 4.0all versionscisa_csaf_otUS
NextSeq 550Dx Operating Software: >= 1.0.0 | <= 1.3.1all versionscisa_csaf_otUS
NextSeq 550Dx Operating Software: >= 1.3.3all versionscisa_csaf_otUS
NovaSeq 6000 Control Software: <= 1.7all versionscisa_csaf_otUS
NovaSeq Control Software: 1.8all versionscisa_csaf_otUS
iScan Control Software: 4.0.0all versionscisa_csaf_otUS
iScan Control Software: 4.0.5all versionscisa_csaf_otUS
iSeq 100: *all versionscisa_csaf_otUS
Illumina MiSeq Control Softwareall versionscisa_csaf_otUS
Illumina MiSeqDx Operating Software≥ 4.0.1cisa_csaf_otUS
Illumina MiniSeq Control Software≥ 2.0cisa_csaf_otUS
Illumina NextSeq 1000/2000 Control Software≤ 1.4.1cisa_csaf_otUS
Illumina NextSeq 500/550 Control Softwareall versionscisa_csaf_otUS
Illumina NextSeq 550Dx Control Softwareall versionscisa_csaf_otUS
Illumina NextSeq 550Dx Operating Software1.0.0 | → 1.3.1cisa_csaf_otUS

showing 20 of 70

advisories (1)

Vendor and ecosystem advisories describing this.

ICSMA-23-117-01Illumina Universal Copy Service2023-04-28icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to take any action at the operating system level. A threat actor could impact settings, configurations, software, or data on the affected product; a threat actor could interact through the affected product via a connected network.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

published 2023-04-28modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan