PatchTheCVEultimaker cura vulnerabilities and fixes
Recent CVEs affecting ultimaker cura, with upgrade or downgrade steps. 2 tracked.
Also searched as: ultimakercura.
ultimaker cura has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-11-15. Highest priority: CVE-2024-8374 (score 37/100).
- CVE-2024-51330 MEDIUM 5.1 UPGRADE An issue in UltiMaker Cura v.4.41 and 5.8.1 and before allows a local attacker to execute arbitrary code via I
- CVE-2024-8374 HIGH 7.8 DOWNGRADE UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format
FAQ
How do I fix ultimaker cura vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ultimaker cura being exploited right now?
None of the tracked ultimaker cura CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ultimaker cura CVE should I patch first?
CVE-2024-8374 currently ranks highest (37/100): UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format .