← Back

Ultimaker 3 Firmware

ultimaker_3_firmware

Vendor: Ultimaker • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-34087
1Ultimaker
3Ultimaker 3 Firmware
Ultimaker S3 FirmwareUltimaker S5 Firmware
Jun 17, 2026
Jan 10, 2022
N/A· v4
7.1 HIGH· v3
6.8 MEDIUM· v2
In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page.
CVE-2021-34086
1Ultimaker
3Ultimaker 3 Firmware
Ultimaker S3 FirmwareUltimaker S5 Firmware
Jun 17, 2026
Jan 10, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver hosts APIs vulnerable to CSRF. They do not verify incoming requests.