CVE-2022-1517

9.8 criticalEPSS 1.8%

Critical (9.8) in illumina local run manager. EPSS 1.8% chance of exploitation in the next 30 days.

LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc. An attacker could also exploit this vulnerability to access APIs not intended for general use and interact through the network.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWEs: CWE-269, CWE-250
Published: 2022-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

illumina:local_run_manager

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-153-02
https://www.cisa.gov/uscert/ics/advisories/icsa-22-153-02

Check your stack JSON