CISA 2026-08-04

Thermo Fisher Applied Biosystems Genetic Analyzers

CVE-2026-17583

Machine-generated analysis · WAYSCloud LLM

Thermo Fisher Applied Biosystems data collection software versions up to 4.0.2, 5.0.2, 1.2.5, 1.2.0, and 1.7.3 are listed as vulnerable. The flaw permits modification of .fsa/.hid output files, potentially altering DNA test results.

Context

The advisory concerns Thermo Fisher Applied Biosystems Genetic Analyzers and associated data collection software. It states that the vulnerability allows an attacker to edit .fsa/.hid files, tampering with DNA data and producing inaccurate test outcomes. The affected products are deployed worldwide in healthcare and public health sectors. No mitigation or patch is provided in the advisory.

Operator considerations

Check: Verify installed software versions against the listed maximum versions.
Isolate: Limit network connectivity of affected analyzers handling sensitive DNA data.
Log: Monitor for unexpected changes to .fsa or .hid files.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of this vulnerability could allow an attacker to modify .fsa/.hid output files, tampering with DNA data and resulting in inaccurate test results.

The following versions of Thermo Fisher Applied Biosystems Genetic Analyzers are affected:

Applied Biosystems 3500/3500xL Series Data Collection Software

Read the full advisory on CISA →