Ulitimaker 3 - Nginx Remote Integer Overflow Vulnerability

[burhop 14]

Hi all.  I just got a new Ultimaker 3.  Today, our network security folks said their tests show that it suffers from  "Nginx Remote Integer Overflow Vulnerability"

 

To fix it, they say to install NginX 1.13.3; 1.12.1 or later version.  I don't know if this is even possible given it is a 3D printer and not really a web server.

 

 

 

[burhop 14]

I'm told changing to a non-scanned port may work.

 

Is there a way to change the default port for the http server running on the Ultimaker 3?

[SandervG 1,521]

@nallath , do you know by chance?

[ahoeben 1,981]

I have not tested this, but upgrading NginX could be "as simple as" enabling developer mode, logging in to the printer as root/ultimaker over ssh, and running "apt update && apt upgrade nginx" (or nginx-light)

Edited June 27, 2018 by ahoeben