EUVD-2021-20749

Malware in sbrugna...

CVE-2021-34086

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver hosts APIs vulnerable to CSRF. They do not verify incoming requests...

CVE-2021-34087

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page...

PT-2022-10320

Name of the Vulnerable Software and Affected Versions Ultimaker S3 3D printer versions through 6.3 Ultimaker S5 3D printer versions through 6.3 Ultimaker 3 3D printer S-line versions through 6.3 Ultimaker 3 versions through 5.2.16 Description The local webserver in the affected 3D printers hosts...

CVE-2021-34086: Cross-Site Request Forgery (CSRF)

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver hosts APIs vulnerable to CSRF. They do not verify incoming requests...

CVE-2021-34087: Improper Restriction of Rendered UI Layers or Frames

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page...

PT-2022-10321

Name of the Vulnerable Software and Affected Versions Ultimaker S3 3D printer versions prior to 6.3 Ultimaker S5 3D printer versions prior to 6.3 Ultimaker 3 3D printer S-line versions prior to 6.3 Ultimaker 3 3D printer versions prior to 5.2.16 Description The issue allows the local webserver to...