Read the docs

Ultimaker

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Ultimaker records in CISA KEV

No Ultimaker vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ultimaker 3 Firmware 2 records LOW Ultimaker Cura 2 records LOW Ultimaker S3 Firmware 2 records LOW Ultimaker S5 Firmware 2 records LOW

Records

2 records in Ultimaker Cura · all components

TI-2024-07765 CVE-2024-8374 · GHSA-rvg9-cwv8-3543

Arbitrary Code Injection in Cura

Priority LOW 36

UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/plugins/ThreeMFReader.py).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00433 Published 2024-09-03 No fix listed CWE-94
TI-2024-34331 CVE-2024-51330 · GHSA-29fm-rc5r-j557

An issue in UltiMaker Cura v.4.41 and 5.8.1 and before allows a local attacker to execute…

Priority LOW 23

An issue in UltiMaker Cura v.4.41 and 5.8.1 and before allows a local attacker to execute arbitrary code via Inter-process communication (IPC) mechanism between Cura application and CuraEngine processes, localhost networ…

CVSS 3.1MEDIUM 5.1 Local High privileges No interaction EPSS 0.00197 Published 2024-11-15 No fix listed CWE-94
Open these records in search →