Back
CVE-2018-1000537
CRITICAL
Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending on branch/version) that can result in Arbitrary code execution. This attack appear to be exploitable via Crafted G-Code instruction/file is sent to the printer.
Published: Jun 26, 2018
Modified: Jun 17, 2026
CWE-119
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| marlinfw | marlin_firmware | * |
GitHub Security Advisory GHSA-52mm-j9gg-2xgp
Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in...
References (4)
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
3.43%
Top 12% most likely to be exploited
Threat Score
40.2 / 100
Data Sources
NVD
EPSS
GitHub