Raise3D Pro2 Series 3D Printers Authentication Bypass Vulnerability Allowing Unauthenticated File System Access

An authentication bypass vulnerability has been identified in the Raise3D Pro2 Series 3D printers, all firmware versions. This vulnerability arises from an unauthenticated debug port that may provide access to the device's file system. Successful exploitation could lead to unauthorized data access and exfiltration.

Impact

Exploitation of this vulnerability could result in unauthorized access to the device file system, allowing for data exfiltration and potential compromise of the target device.

Remediation

Raise3D is developing a patched version of the printer firmware, but no release date has been provided. In the meantime, it is recommended to disable developer mode if it is not required. Further information is available from the Raise3D Support Center.