CISA Advisory CVE-2026-17583: Thermo Fisher Genetic Analyzers Data Tampering Vulnerability

Vulnerability Overview Vulnerability Name: Thermo Fisher Applied Biosystems Genetic Analyzers Release Date: August 4, 2026 Alert Code: ICSMA-26-216-01 Related Topics: Industrial Control System Vulnerabilities, Industrial Control Systems CVSS Score: v3 8.4 Vendor: Thermo Fisher Device: Thermo Fisher Applied Biosystems Genetic Analyzers Vulnerability Description: Successful exploitation of this vulnerability may allow an attacker to modify .fsa/.hid output files, tamper with DNA data, and result in inaccurate test results. Vulnerability Type: Missing integrity checks support Scope Affected Software Versions: - Applied Biosystems 3500/3500xL Series Data Collection Software <=4.0.2 - Applied Biosystems 3730/3730xL Series Data Collection Software <=5.0.2 - Applied Biosystems SeqStudio Genetic Analyzer Data Collection Software <=1.2.5 - Applied Biosystems SeqStudio Flex Series Instrument Software <=1.2.0 - Applied Biosystems GeneMapper ID-X Software <=1.7.3 - Applied Biosystems 3130 Series Data Collection Software <=4.1 - ABI PRISM 3100/3100-Avant Data Collection Software <=2.0 - ABI PRISM 310 Data Collection Software <=3.1 Critical Infrastructure Sector: Health and Public Health Deployed Countries/Regions: Global Company Headquarters Location: United States Remediation Recommended Practices: - Minimize the network exposure of all control system devices and/or systems to ensure they are not accessible from the internet. - When remote access is required, use more secure remote access methods, such as Virtual Private Networks (VPNs), and recognize that VPNs may have vulnerabilities; ensure they are updated to the latest version. - Before deploying defensive measures, organizations should conduct appropriate impact analysis and risk assessment. - Implement recommended cybersecurity policies to proactively defend ICS assets. - Organizations should follow internal procedures and report suspicious malicious activities to CISA. Vulnerability Details CVE ID: CVE-2026-17583 Acknowledgments This vulnerability was reported to CISA by Nathaniel Adams, Laura Gaydosh-Combs, and Kevin Dyer. Legal Notice and Terms of Use This product is subject to this notice and the Privacy and Usage Policy. Revision History Initial Release Date: 2026-08-04 Revision: 1 Summary: Initial Release Tags Sector: Health and Public Health Sector Topics: Industrial Control System Vulnerabilities, Industrial Control Systems Related Advisories OFFIS DCMTK Toolkit pydicom pynetdicom Library OHIF Viewers DICOM Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT Feedback Please share your thoughts. We have recently updated our anonymous product survey and welcome your feedback. Footer CISA Central 1-844-Say-CISA contact@cisa.dhs.gov Other Links About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback Summary This page details a critical vulnerability in Thermo Fisher Applied Biosystems Genetic Analyzers, with a CVSS score of 8.4. The vulnerability could lead to the tampering of DNA data, affecting test results. Affected software versions include multiple series of data collection software and instrument software. CISA recommends various defensive measures, such as minimizing network exposure and using secure remote access methods. Additionally, relevant legal notices, revision history, and feedback channels are provided.

Goal Reached Thanks to every supporter — we hit 100%!

CISA Advisory CVE-2026-17583: Thermo Fisher Genetic Analyzers Data Tampering Vulnerability