PT-2022-3910 · Illumina · Illumina Local Run Manager

Published 2022-06-24 · Updated 2022-07-01 · CVE-2022-1519

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Illumina Local Run Manager (affected versions not specified)

Description The issue is related to the lack of restrictions on file uploads. A malicious actor can upload any file type, including executable code, allowing for a remote code exploit. This can enable a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2022-04723

CVE-2022-1519

Affected Products

Illumina Local Run Manager

References · 5

• https://bdu.fstec.ru/vul/2022-04723 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-1519 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1519 · Vendor Advisory
• https://us-cert.gov/ics/advisories/icsa-22-153-02 · Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-153-02 · Note