CVE-2024-8374 PoC
We calculate the final price from your selected file. You review and accept it before payment.
Saved on this device.
This is a proof-of-concept for UltiMaker Cura code execution vulnerability (CVE-2024-8374).
- Rating
- 0 / 5
- Likes
- 1
- Downloads
- 19
- Makes
- 0
- Views
- 92
- Reviews
- 0
Updated at source:
Model information
- Source
- Printables
- Category
- Other 3D Objects for Learning
- License
- Creative Commons — Public Domain
This model is completely harmless to your device and serves only as a proof-of-concept for security research on UltiMaker Cura versions 5.7.0 to 5.7.2, which are vulnerable to code execution through 3MF model loading.
Opening poc-code-execution.3mf with vulnerable Cura version will spawn a calculator application on your computer.
IMPORTANT NOTICE:
If you're using a vulnerable version of Cura (5.7.0 to 5.7.2), it is HIGHLY RECOMMENDED that you upgrade to Cura 5.8.0 or later, where this vulnerability has been addressed and mitigated.
For further information, please refer to Checkmarx ZERO blogpost.