Skip to content

Instantly share code, notes, and snippets.

View HalaAli198's full-sized avatar

Hala Ali HalaAli198

View GitHub Profile
@HalaAli198
HalaAli198 / CVE_report.txt
Last active November 13, 2024 20:08
CVE-2024-51330 --> Unencrypted Inter-Process Communication (IPC) Vulnerability - UltiMaker Cura
=================================================
[1] CVE-2024-51330 --> Unencrypted Inter-Process Communication (IPC) Vulnerability - UltiMaker Cura
=================================================
[Description]
Ultimaker Cura employs unencrypted inter-process communication (IPC) over localhost between its main application and CuraEngine (the slicing process)
using the libArcus protocol on port 49674. This communication involves a bidirectional flow of data essential to the 3D printing process.
Initially, the Cura application sends two types of data to CuraEngine. First, it transmits the mesh data, which is a binary representation of the
3D model's geometry. While this data is in binary format and not easily interpretable or modifiable in real-time, it is crucial for the slicing process.