Vulnerability Details CVE-2022-1524
LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 15.5%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 4.3
Products affected by CVE-2022-1524
-
cpe:2.3:a:illumina:local_run_manager:1.3
-
cpe:2.3:a:illumina:local_run_manager:2.0
-
cpe:2.3:a:illumina:local_run_manager:3.1
-
cpe:2.3:h:illumina:iseq_100:-
-
cpe:2.3:h:illumina:miniseq:-
-
cpe:2.3:h:illumina:miseq:-
-
cpe:2.3:h:illumina:miseq_dx:-
-
cpe:2.3:h:illumina:nextseq_500:-
-
cpe:2.3:h:illumina:nextseq_550:-
-
cpe:2.3:h:illumina:nextseq_550dx:-