What’s Vulnerable › Vulnerabilities

CVE-2021-34087

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-10 · updated 2026-06-17
• Weakness: CWE-1021

Description

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page.

Affected products

• Ultimaker 3 Firmware: through 5.2.16
• Ultimaker S3 Firmware: through 6.3
• Ultimaker S5 Firmware: through 6.3

References

• https://kth.diva-portal.org/smash/get/diva2:1623489/FULLTEXT01.pdf
• https://ultimaker.com/3d-printers/ultimaker-s3
• https://ultimaker.com/3d-printers/ultimaker-s5
• https://kth.diva-portal.org/smash/get/diva2:1623489/FULLTEXT01.pdf
• https://ultimaker.com/3d-printers/ultimaker-s3
• https://ultimaker.com/3d-printers/ultimaker-s5

Get alerted when CVE-2021-34087 or the next vulnerability affects your stack