CVE-2026-17583: Thermo Fisher Applied Biosystems 3500/3500xL Series

Описание

Оригинално описание

The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.

Засегнати продукти

• Thermo Fisher Applied Biosystems 3500/3500xL Series Data Collection Software: до 4.0.2
• Thermo Fisher Applied Biosystems 3730/3730xL Series Data Collection Software: до 5.0.2
• Thermo Fisher Applied Biosystems SeqStudio Genetic Analyzer Data Collection Software: до 1.2.5
• Thermo Fisher Applied Biosystems SeqStudio Flex Series Instrument Software: до 1.2.0
• Thermo Fisher Applied Biosystems GeneMapper ID-X Software: до 1.7.3
• Thermo Fisher Applied Biosystems 3130 Series Data Collection Software: до 4.1
• Thermo Fisher ABI PRISM 3100/3100-Avant Data Collection Software: до 2.0
• Thermo Fisher ABI PRISM 310 Data Collection Software: до 3.1

Вид слабост

• CWE-353 Липсваща поддръжка за проверка на целостта

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-17583
• https://nvd.nist.gov/vuln/detail/CVE-2026-17583
• https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/fsa_hid_bulletin.pdf
• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-216-01
• https://www.cve.org/CVERecord?id=CVE-2026-17583