CVE-2024-0552

Intumit inc. SmartRobot - Remote Code Execution

View on CVE.org

Published Jan 15, 2024 CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed

Description

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Intumit inc.

SmartRobot

unaffected

Version	Status	Constraints
`0`	affected	≤ v6.0.0-202012tw

Configuration 1 [-]

cpe:2.3:a:intumit:smartrobot:*:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

Vendor Solution

Update to latest version

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2024-16345	Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: 1.2% (1.179% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html

History

Mar 17, 2026 7:00 PM Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
CPEs	cpe:2.3:o:intumit:smartrobot_firmware::::::::	cpe:2.3:a:intumit:smartrobot::::::::
Vendors & Products	Intumit smartrobot Firmware

Oct 14, 2024 7:15 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Oct 14, 2024 6:30 AM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-1395

Subscriptions

Intumit Smartrobot

Weaknesses

Sources

CVE record Updated: Oct 14, 2024, 6:11 AM

Status: PUBLISHED
Assigner: twcert
Published: Jan 15, 2024, 4:03 AM
Updated: Oct 14, 2024, 6:11 AM
Reserved: Jan 15, 2024, 2:07 AM

View source JSON

Vulnrichment Updated: Aug 1, 2024, 6:11 PM

Updated: Aug 1, 2024, 6:11 PM

NVD Updated: Jun 17, 2026, 6:53 AM

Status: Analyzed
Published: Jan 15, 2024, 4:15 AM
Modified: Jun 17, 2026, 6:53 AM

View source JSON

Red Hat No data

No data.

OpenCVE enrichment No data

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-0552", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "state": "PUBLISHED", "assignerShortName": "twcert", "dateReserved": "2024-01-15T02:07:52.690Z", "datePublished": "2024-01-15T04:03:07.044Z", "dateUpdated": "2024-10-14T06:11:21.141Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "SmartRobot", "vendor": "Intumit inc.", "versions": [{"lessThanOrEqual": "v6.0.0-202012tw", "status": "affected", "version": "0", "versionType": "custom"}]}], "datePublic": "2024-01-15T04:30:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server."}], "value": "Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server."}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1395", "description": "CWE-1395 Dependency on Vulnerable Third-Party Component", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2024-10-14T06:11:21.141Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Update to latest version"}], "value": "Update to latest version"}], "source": {"advisory": "TVN-202401001", "discovery": "EXTERNAL"}, "title": "Intumit inc. SmartRobot - Remote Code Execution", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-0552", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-04-22T16:20:10.789210Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*"], "vendor": "intumit", "product": "smartrobot", "versions": [{"status": "affected", "version": "v6.0.0-202012tw"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:58:39.837Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:11:35.273Z"}, "title": "CVE Program Container", "references": [{"tags": ["third-party-advisory", "x_transferred"], "url": "https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html", "tags": ["third-party-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:11:35.273Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-0552", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-04-22T16:20:10.789210Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*"], "vendor": "intumit", "product": "smartrobot", "versions": [{"status": "affected", "version": "v6.0.0-202012tw"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-04-22T16:18:16.102Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "Intumit inc. SmartRobot - Remote Code Execution", "source": {"advisory": "TVN-202401001", "discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Intumit inc.", "product": "SmartRobot", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "v6.0.0-202012tw"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update to latest version", "supportingMedia": [{"type": "text/html", "value": "Update to latest version", "base64": false}]}], "datePublic": "2024-01-15T04:30:00.000Z", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.", "supportingMedia": [{"type": "text/html", "value": "Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1395", "description": "CWE-1395 Dependency on Vulnerable Third-Party Component"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2024-10-14T06:11:21.141Z"}}}, "cveMetadata": {"cveId": "CVE-2024-0552", "state": "PUBLISHED", "dateUpdated": "2024-10-14T06:11:21.141Z", "dateReserved": "2024-01-15T02:07:52.690Z", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "datePublished": "2024-01-15T04:03:07.044Z", "assignerShortName": "twcert"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "SmartRobot", "vendor": "Intumit inc.", "versions": [{"lessThanOrEqual": "v6.0.0-202012tw", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "twcert@cert.org.tw"}, {"affectedData": [{"cpes": ["cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "smartrobot", "vendor": "intumit", "versions": [{"status": "affected", "version": "v6.0.0-202012tw"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:intumit:smartrobot:*:*:*:*:*:*:*:*", "matchCriteriaId": "74261044-E58C-4E9D-96BC-E8429501109D", "versionEndIncluding": "6.0.0-202012tw", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server."}, {"lang": "es", "value": "Intumit inc. SmartRobot's web framwork tiene una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo. Un atacante remoto no autorizado puede aprovechar esta vulnerabilidad para ejecutar comandos arbitrarios en el servidor remoto."}], "id": "CVE-2024-0552", "lastModified": "2026-06-17T06:53:45.537", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "twcert@cert.org.tw", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-0552", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2024-04-22T16:20:10.789210Z", "version": "2.0.3"}}]}, "published": "2024-01-15T04:15:08.260", "references": [{"source": "twcert@cert.org.tw", "tags": ["Third Party Advisory"], "url": "https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html"}], "sourceIdentifier": "twcert@cert.org.tw", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-74"}], "source": "nvd@nist.gov", "type": "Primary"}]}