CVE-2024-8374 PoC
Obliczymy ostateczną cenę na podstawie wybranego pliku. Sprawdzisz ją i zaakceptujesz przed płatnością.
Zapisane na tym urządzeniu.
This is a proof-of-concept for UltiMaker Cura code execution vulnerability (CVE-2024-8374).
- Ocena
- 0 / 5
- Polubienia
- 1
- Pobrania
- 19
- Wydruki
- 0
- Wyświetlenia
- 92
- Oceny
- 0
Aktualizacja u źródła:
Informacje o modelu
- Źródło
- Printables
- Kategoria
- Other 3D Objects for Learning
- Licencja
- Creative Commons — Public Domain
This model is completely harmless to your device and serves only as a proof-of-concept for security research on UltiMaker Cura versions 5.7.0 to 5.7.2, which are vulnerable to code execution through 3MF model loading.
Opening poc-code-execution.3mf with vulnerable Cura version will spawn a calculator application on your computer.
IMPORTANT NOTICE:
If you're using a vulnerable version of Cura (5.7.0 to 5.7.2), it is HIGHLY RECOMMENDED that you upgrade to Cura 5.8.0 or later, where this vulnerability has been addressed and mitigated.
For further information, please refer to Checkmarx ZERO blogpost.