CVE-2024-8374 PoC

This model is completely harmless to your device and serves only as a proof-of-concept for security research on UltiMaker Cura versions 5.7.0 to 5.7.2, which are vulnerable to code execution through 3MF model loading.

Opening poc-code-execution.3mf with vulnerable Cura version will spawn a calculator application on your computer.

IMPORTANT NOTICE:

If you're using a vulnerable version of Cura (5.7.0 to 5.7.2), it is HIGHLY RECOMMENDED that you upgrade to Cura 5.8.0 or later, where this vulnerability has been addressed and mitigated.

For further information, please refer to Checkmarx ZERO blogpost.