Thermofisher

9 CVEs across 15 Thermofisher products. Browse Thermofisher vulnerabilities, severities, and proof-of-concept exploits.

Thermofisher products with known CVEs

ProductCVEs
Torrent Suite Software4
Ion Torrent Onetouch 22
Ion Torrent Onetouch 2 Firmware2
Abi Prism 3100\/3100-Avant Data Collection Software1
Abi Prism 310 Data Collection Software1
Applied Biosystems 3130 Series Data Collection Software1
Applied Biosystems 3500\/3500xl Series Data Collection Software1
Applied Biosystems 3730\/3730xl Series Data Collection Software1
Applied Biosystems Seqstudio Flex Series Instrument Software1
Applied Biosystems Seqstudio Genetic Analyzer Data Collection Software1
Dt80 Dex1
Dt80 Dex Firmware1
Dt8x1
Dt8x Firmware1
Genemapper Id-X1
Thermofisher CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-17583High8.42026-08-05The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with the…
CVE-2025-54307High8.82025-12-04An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offli…
CVE-2025-54306High7.22025-12-04An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration…
CVE-2025-54305High7.82025-12-04An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. One of the middlewares included in this application, LocalhostAuthMiddlew…
CVE-2025-54304Critical9.82025-12-04An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. When they are powered on, an X11 display server is started. The display ser…
CVE-2025-54303Critical9.82025-12-04The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API. The ionadmin user…
CVE-2025-53963Critical9.82025-12-04An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root accoun…
CVE-2017-11349Critical9.82017-07-17dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connectio…
CVE-2017-11165Critical9.82017-07-12dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile…