Approved changes feed: RSS · Atom

cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorIntumit (73b98f1e-615e-5f5c-a8da-02c3b3da2b46)
ProductSmartrobot (ad4578ac-6308-5b5c-aa6d-6bd783f3f3ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8776 not_vulnerable 2026-06-08 07:00:25.697448 INTUMIT SmartRobot - Cross-site Scripting
MEDIUM (6.1)
SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks.
Published: 2024-09-16T05:39:59.200Z
Updated: 2024-09-16T13:06:09.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2413 vulnerable 2026-06-08 06:33:31.054720 Intumit SmartRobot - Use of Hard-coded Cryptographic Key
CRITICAL (9.8)
Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator privileges and subsequently execute arbitrary code on the remote server using built-in system functionality.
Published: 2024-03-13T02:51:10.886Z
Updated: 2025-04-15T15:24:41.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0552 not_vulnerable 2026-06-08 06:22:01.332447 Intumit inc. SmartRobot - Remote Code Execution
CRITICAL (9.8)
Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.
Published: 2024-01-15T04:03:07.044Z
Updated: 2024-10-14T06:11:21.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0552 vulnerable 2026-06-08 06:22:01.331026 Intumit inc. SmartRobot - Remote Code Execution
CRITICAL (9.8)
Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.
Published: 2024-01-15T04:03:07.044Z
Updated: 2024-10-14T06:11:21.141Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.