• caglararli@hotmail.com
  • 05386281520

What is the potential impact of security risks associated specifically with 3D printers or their hosts?

Çağlar Arlı      -    67 Views

What is the potential impact of security risks associated specifically with 3D printers or their hosts?

Recently a bunch of Anycubic 3D printers have been hacked as reported in an article from bleedingcomputer.com.

According to a wave of online reports from Anycubic customers, someone hacked their 3D printers to warn that the devices are exposed to attacks.

According to the same text file, 2,934,635 devices downloaded this warning message via the vulnerable API.

hacked_machine_readme.gcode

The impact in this case seems limited to only a warning using a text file that was placed on the printer. However, I can imagine a scenario where (through an intermediate host such as OctoPrint) the printer firmware can be reflashed (some OctoPlugin for example allows for remote flashing). The firmware could for form a real physical danger, for example when thermal runaway protection or heat limits are removed, or false values are reported to the printer LCD.

My question is, what specific vulnerabilities or risks are associates with 3D printers or 3D printer hosts and what potential impact does it have?