CVE-2024-0552

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intumit:smartrobot_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:46

Type Values Removed Values Added
References () https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html - Third Party Advisory () https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html - Third Party Advisory

23 Jan 2024, 19:34

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
References () https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html - () https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html - Third Party Advisory
CPE cpe:2.3:o:intumit:smartrobot_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*
CWE CWE-74
First Time Intumit smartrobot Firmware
Intumit smartrobot
Intumit

15 Jan 2024, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-15 04:15

Updated : 2024-11-21 08:46


NVD link : CVE-2024-0552

Mitre link : CVE-2024-0552

CVE.ORG link : CVE-2024-0552


JSON object : View

Products Affected

intumit

  • smartrobot
  • smartrobot_firmware
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')