CVE-2021-34087

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page.

Score

CVSS 3.1 7.1 High

Status

Modified - cve@mitre.org

Published

2022-01-10

Last modified

2024-08-04

Weaknesses

CWE-1021

Affected products

• Ultimaker 3 Firmware (Ultimaker)
• Ultimaker S3 Firmware (Ultimaker)
• Ultimaker S5 Firmware (Ultimaker)

References

• https://kth.diva-portal.org/smash/get/diva2:1623489/FULLTEXT01.pdf
• https://ultimaker.com/3d-printers/ultimaker-s3
• https://ultimaker.com/3d-printers/ultimaker-s5