CVE-2023-1968 is a high-severity vulnerability affecting instruments with Illumina Universal Copy Service v2.x, which is used in various genetic analysis systems. This issue impacts a range of Illumina instruments and their corresponding firmware versions.

How do I know if I'm affected?

To determine if you're affected by this vulnerability, you'll need to check if you're using instruments with Illumina Universal Copy Service v2.x. Affected products include iSeq 100, MiniSeq, MiSeq, MiSeqDx, NextSeq 500 / NextSeq 550, and NextSeq 550Dx. If you're using any of these instruments, you may be vulnerable and should take necessary precautions.

What should I do if I'm affected?

If you're affected by this vulnerability, you have to update your control software when released, as per your instrument's requirements. Follow Illumina Cybersecurity best practices, like enabling the firewall and running Universal Copy Service as a standard user. Then use the UCS Vulnerability Instructions Guide based on your system configuration. Lastly, minimize network exposure, isolate control system networks, and use secure methods for remote access.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-1968 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-1327, which refers to binding to an unrestricted IP address, potentially allowing unauthorized access to affected systems.

For more details

CVE-2023-1968 is a significant vulnerability affecting instruments with Illumina Universal Copy Service v2.x, allowing unauthorized access to affected systems. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the links below.

• NVD - CVE-2023-1968

• Local Run Manager Vulnerability Correction

• Illumina Universal Copy Service | CISA