CVE-2024-0552 CRITICAL

CVE-2024-0552: Intumit inc. SmartRobot - Remote Code Execution

Vendor Intumit Inc.

Product SmartRobot

Weakness CWE-1395

Published January 15, 2024

Last update October 14, 2024

View on NVD All CVEs

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.

Key dates

02Disclosure timeline

January 15, 2024 CVE published

October 14, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-0552 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1395.html

Related vulnerabilities

04Related CVE

CVE-2024-14031 Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library CVE-2024-26293 Unauthenticated Path Traversal affecting Avid NEXIS CVE-2026-3257 UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library CVE-2025-42927 Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service) CVE-2025-12220 Busybox 1.31.1 - Multiple Known Vulnerabilities