--- title: "CVE-2024-8374" date: "2024-12-12T07:00:00+00:00" url: "https://checkmarx.com/zero/vulnerabilities/cve-2024-8374/" --- # CVE-2024-8374 [Disclosed vulnerabilities](https://checkmarx.com/zero/vulnerabilities/) Fixed: Jul 16, 2024 CVE-2024-8374 **Published:** Dec 12, 2024 CWE-94 CWE-94 7.8 High Severity code cura injection python OR Ori Ron Reported by Checkmarx Zero Details Overview ## Summary A Code Injection vulnerability in the file ThreeMFReader.py allows attackers to distribute malicious models which will trigger code injection vulnerabilities on vulnerable UltiMaker Cura versions. ## Product This vulnerability affects UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 ## Impact The vulnerability allowing an attacker to execute arbitrary code by crafting a malicious 3MF file. ## Steps to reproduce Anyone can tamper an existing 3MF model to run arbitrary code: 1. Extract the 3MF file (which is a ZIP archive). 2. Edit the file 3dmodel.model and search for the `drop_to_build` (if not exist, re-export the file using Cura). 3. Add your python payload code and save the file: `__import__('os').system('calc')` 4. Open the file with vulnerable Cura version ### Expected result: The calculator application will be spawned on the machine ## Remediation A fix was released in commit [285a241](https://github.com/Ultimaker/Cura/commit/285a241eb28da3188c977f85d68937c0dad79c50) for version v5.8.0-beta.1, where the unnecessary `eval` call was removed with appropriate boolean parsing. ## Credit This issue was discovered and reported by Checkmarx Senior Researcher [Ori Ron](https://www.linkedin.com/in/ori-ron-40099912b/?originalSubdomain=il). ## Resources 1. [Research Blogpost](https://checkmarx.com/blog/pwn3d-abusing-3d-models-for-code-execution/) 2. [CVE-2024-8374](https://nvd.nist.gov/vuln/detail/CVE-2024-8374) 3. [3D Models – Clean 3MF Model & PoC for Code Execution](https://www.printables.com/model/1024766-cve-2024-8374-poc) 0 High Severity CVSS v3.1 Score 7.8 CVSS v3.1 Vectors- Attack Vector: Local - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High Advisory Timeline1. Discovered Jun 15, 2024 2. Disclosed Jun 15, 2024 The vulnerability was privately disclosed to the maintainer 3. Fixed Jul 16, 2024 Version 5.8.0-beta.1, containing the fix, was released. ## Explore more findings [27 Nov 2025 CVE-2025-34281 Stored Cross-Site Scripting (XSS) in ThingsBoard 6.2 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-34281/) [17 Jan 2025 CVE-2025-0825 HTTP Response Splitting in cpp-httplib 6.9 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-0825/) [17 Jun 2025 CVE-2025-6050 Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface 4.8 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-6050/) [14 Nov 2024 CVE-2024-52526 Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Tab 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-52526/) [14 Nov 2024 CVE-2024-51497 Stored Cross-site Scripting in @LibreNMS/LibreNMS Custom OID Tab 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51497/) [14 Nov 2024 CVE-2024-51496 Reflected Cross-site Scripting in @LibreNMS/LibreNMS /wireless and /health endpoints 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51496/) [ 14 Nov 2024 CVE-2024-51495 Stored Cross-site Scripting in @LibreNMS/LibreNMS Device Overview `overwrite\_ip` Field 7.5 Visit the page ](https://checkmarx.com/zero/vulnerabilities/cve-2024-51495/) [14 Nov 2024 CVE-2024-51494 Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51494/) [14 Nov 2024 CVE-2024-50352 Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Section of Device Overview 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50352/) [14 Nov 2024 CVE-2024-50351 Reflected Cross-site Scripting in @LibreNMS/LibreNMS Logs Tab 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50351/) [14 Nov 2024 CVE-2024-50350 Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings Port Group 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50350/) [14 Nov 2024 CVE-2024-49764 Stored Cross-site Scripting in @LibreNMS/LibreNMS Capture Debug Information 7.5 Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-49764/)