Code injection

2022-01-1014:10:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.2%

JSON

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page.

CPENameOperatorVersion
ultimaker_3_firmwarele5.2.16
ultimaker_s3_firmwarele6.3
ultimaker_s5_firmwarele6.3

Name	Operator	Version
ultimaker_3_firmware	le	5.2.16
ultimaker_s3_firmware	le	6.3
ultimaker_s5_firmware	le	6.3

References

kth.diva-portal.org/smash/get/diva2:1623489/FULLTEXT01.pdf

ultimaker.com/3d-printers/ultimaker-s3

ultimaker.com/3d-printers/ultimaker-s5