Prusa has patched all the vulnerabilities discovered ahead of a coordinated news release.
a]:text-inherit [&>a]:underline">
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .
Dixken is an experienced Freelance Cloud Architect, DevOps and Platform Engineer. Security research is more of a hobby, he notes in the blog post, but it is clearly a passion strong enough to spend a whole week probing the MK4S for vulnerabilities. The result is far more than the funny old Rickroll . The week of debugging, fuzzing and reverse engineering “armed with Opus 4.8 and a fuzzer” resulted in “14 findings, roughly 23 individual defects, and a chain that ends with the printer's main controller running code I sent it over the network,” noted Dixken. “Yup, fully fledged RCE.”
The headlining RCE scored 8.1 and is officially described as High Severity. This serious bug was in the cloud (or self-hosted) management platform called Prusa Connect. You can see proof-of-concept code Rickrolling the user in Dixken’s embedded video. He sent this video to Prusa .
The methods used to uncover these vulnerabilities are outlined in the source blog, if you’d like to know more. Meanwhile, there were many other vulnerabilities uncovered and cataloged. These include a USB filename attack, heap overflows triggered by malformed encrypted print files, and network denial-of-service flaws. Many of the bugs were probably symptoms of the original developers’ use of assert statements to enforce assumptions.
Happily for Prusa 3D printer users, Dixken has responsibly disclosed this multitude of vulnerabilities. The engineer says that within 24 hours of the Rickroll video being shared on social media, the 3D printing firm’s team coordinated professionally, efficiently, and kindly. Companies don’t always react so positively to those helping them find vulnerabilities in their wares.
Meta Quest user vibe-codes 3D object throwing to 3D printer
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/cyber-security/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/cyber-security/software-engineer-rickrolls-his-prusa-3d-printer-via-remote-code-execution-exploit-one-week-of-testing-with-claude-opus-uncovers-23-prusa-buddy-firmware-defects#main
- https://futureplc.com/privacy-policy/
- Hobbyist turns $45 USB-C hub into a working Nintendo Switch 2 dock by patching its firmware
- Nvidia’s Board reportedly preparing to oust CEO Jensen Huang as second extra-marital affair emerges
- Save $119 on DDR5 RAM with this high-end AM5 gaming combo from Newegg
- Linux kernel reviewer steps down from memory management duties due to influx of AI slop patches
- Noctua brings space-grade carbon nanotube thermal pad to AMD AM5 and AM4 processors
Informational only. No financial advice. Do your own research.