CVE-2024-0552

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.
References
Link Resource
https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*
cpe:2.3:o:intumit:smartrobot_firmware:*:*:*:*:*:*:*:*

History

23 Jan 2024, 19:34

Type Values Removed Values Added
First Time Intumit smartrobot Firmware
Intumit smartrobot
Intumit
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
References () https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html - () https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html - Third Party Advisory
CPE cpe:2.3:o:intumit:smartrobot_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*
CWE CWE-74

15 Jan 2024, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-15 04:15

Updated : 2024-10-14 07:15


NVD link : CVE-2024-0552

Mitre link : CVE-2024-0552

CVE.ORG link : CVE-2024-0552


JSON object : View

Products Affected

intumit

  • smartrobot
  • smartrobot_firmware
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')