The MakerBot Replicator 5G printer runs an Apache HTTP Server with directory indexing enabled. Apache logs, system logs, design files (i.e., a history of print files), and more are exposed to unauthenticated attackers through this HTTP server.
References
Link | Resource |
---|---|
https://secur3.us/index.php/vulnerabilities/ | Broken Link |
https://support.makerbot.com/learn/makerbot-desktop-software/release-notes/makerbot-desktop-release-notes_13520 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2019-06-24 14:15
Updated : 2019-07-03 06:59
NVD link : CVE-2014-9699
Mitre link : CVE-2014-9699
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
makerbot
- replicator_5th_generation_firmware
- replicator_5th_generation