Sensitive Information Exposure in OctoPrint by OctoPrint Vendors
CVE-2018-16710

9.1CRITICAL

Key Information:

Vendor

Octoprint

Status
Octoprint
Vendor
CVE Published:
7 September 2018

What is CVE-2018-16710?

OctoPrint, a popular open-source 3D printer management software, has a vulnerability that allows remote attackers to exploit HTTP requests on port 8081. This vulnerability can lead to the exposure of sensitive information or even result in a denial of service. The OctoPrint team has highlighted that deploying OctoPrint on the public internet is highly discouraged and emphasizes the associated risks. For those who use this software, it is crucial to implement adequate security practices to mitigate the threat posed by exposing it to untrusted networks.

References

https://github.com/foosel/OctoPrint/issues/2814
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.