CVE-2024-8374 — HIGH (7.8) — White Hats Nepal

Vulnerability Description

UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/plugins/ThreeMFReader.py). The vulnerability arises from improper handling of the drop_to_buildplate property within 3MF files, which are ZIP archives containing the model data. When a 3MF file is loaded in Cura, the value of the drop_to_buildplate property is passed to the Python eval() function without proper sanitization, allowing an attacker to execute arbitrary code by crafting a malicious 3MF file. This vulnerability poses a significant risk as 3MF files are commonly shared via 3D model databases.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ultimaker	Ultimaker Cura	5.7.0

Related Weaknesses (CWE)

CWE-94

References

https://github.com/Ultimaker/Cura/commit/285a241eb28da3188c977f85d68937c0dad79c5Patch

FAQ

What is CVE-2024-8374?

CVE-2024-8374 is a vulnerability with a CVSS score of 7.8 (HIGH). UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/plugins/ThreeMFReader.py). The vulnerability arises from improper handling of the...

How severe is CVE-2024-8374?

CVE-2024-8374 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-8374?

Check the references section above for vendor advisories and patch information. Affected products include: Ultimaker Ultimaker Cura.