CVE-2024-24051

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-24051
Improper input validation of printing files in Monoprice Select Mini V2 V37.115.32 allows attackers to instruct the device's movable parts to destinations that exceed the devices' maximum coordinates via the printing of a malicious .gcode file.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/tkruppert/Reported_Vulnerabilities/blob/main/CVE-2024-24051.md Broken Link
https://github.com/tkruppert/Reported_Vulnerabilities/blob/main/CVE-2024-24051.md Broken Link
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:monoprice:select_mini_3d_printer_v2_firmware:37.115.32:*:*:*:*:*:*:*
cpe:2.3:h:monoprice:select_mini_3d_printer_v2:*:*:*:*:*:*:*:*
History

21 Nov 2024, 08:58

Type Values Removed Values Added
References () https://github.com/tkruppert/Reported_Vulnerabilities/blob/main/CVE-2024-24051.md - Broken Link () https://github.com/tkruppert/Reported_Vulnerabilities/blob/main/CVE-2024-24051.md - Broken Link

20 Nov 2024, 19:16

Type Values Removed Values Added
First Time Monoprice select Mini 3d Printer V2 Firmware
Monoprice select Mini 3d Printer V2
CPE cpe:2.3:h:monoprice:select_min_v2:*:*:*:*:*:*:*:*
cpe:2.3:o:monoprice:select_min_v2_firmware:37.115.32:*:*:*:*:*:*:*		 cpe:2.3:h:monoprice:select_mini_3d_printer_v2:*:*:*:*:*:*:*:*
cpe:2.3:o:monoprice:select_mini_3d_printer_v2_firmware:37.115.32:*:*:*:*:*:*:*

26 Aug 2024, 12:43

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Monoprice
Monoprice select Min V2 Firmware
Monoprice select Min V2
References () https://github.com/tkruppert/Reported_Vulnerabilities/blob/main/CVE-2024-24051.md - () https://github.com/tkruppert/Reported_Vulnerabilities/blob/main/CVE-2024-24051.md - Broken Link
CPE cpe:2.3:h:monoprice:select_min_v2:*:*:*:*:*:*:*:*
cpe:2.3:o:monoprice:select_min_v2_firmware:37.115.32:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo

13 Jun 2024, 18:36

Type Values Removed Values Added
Summary
  • (es) La validación de entrada incorrecta de los archivos de impresión en Monoprice Select Mini V2 V37.115.32 permite a los atacantes indicar a las partes móviles del dispositivo destinos que exceden las coordenadas máximas de los dispositivos mediante la impresión de un archivo .gcode malicioso.

12 Jun 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-12 18:15

Updated : 2024-11-21 08:58

NVD link : CVE-2024-24051

Mitre link : CVE-2024-24051

CVE.ORG link : CVE-2024-24051

JSON object : View

Products Affected

monoprice

  • select_mini_3d_printer_v2_firmware
  • select_mini_3d_printer_v2
CWE
NVD-CWE-noinfo