Vulnerabilities > CVE-2021-34087 - Improper Restriction of Rendered UI Layers or Frames vulnerability in Ultimaker products

047910
CVSS 7.1 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
LOW
network
low complexity
ultimaker
CWE-1021
NVD
Published: 2022-01-10
Updated: 2024-11-21

Summary

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page.

Vulnerable Configurations

Part Description Count
OS
Ultimaker
3
Hardware
Ultimaker
3

Common Weakness Enumeration (CWE)

References