GCVE - cpe:2.3:a:intumit:smartrobot:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:intumit:smartrobot:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Intumit (`73b98f1e-615e-5f5c-a8da-02c3b3da2b46`)
Product	Smartrobot (`ad4578ac-6308-5b5c-aa6d-6bd783f3f3ac`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-3572`	vulnerable	2026-06-08 07:23:09.379298	INTUMIT SmartRobot - Server-Side Request Forgery HIGH (7.5) SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server. Published: 2025-04-14T01:38:42.018Z Updated: 2025-04-14T15:50:50.785Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-10064-6346a-1.html https://www.twcert.org.tw/en/cp-139-10065-2494c-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8776`	vulnerable	2026-06-08 07:00:25.695497	INTUMIT SmartRobot - Cross-site Scripting MEDIUM (6.1) SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks. Published: 2024-09-16T05:39:59.200Z Updated: 2024-09-16T13:06:09.757Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8069-73393-1.html https://www.twcert.org.tw/en/cp-139-8070-d10bc-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2413`	vulnerable	2026-06-08 06:33:31.055651	Intumit SmartRobot - Use of Hard-coded Cryptographic Key CRITICAL (9.8) Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator privileges and subsequently execute arbitrary code on the remote server using built-in system functionality. Published: 2024-03-13T02:51:10.886Z Updated: 2025-04-15T15:24:41.891Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-7697-ecf10-1.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12652`	vulnerable	2026-06-08 06:25:35.842726	Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection') A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code. Published: 2024-12-26T04:05:16.468Z Updated: 2024-12-26T17:39:54.645Z Open on db.gcve.eu Reference links https://zuso.ai/advisory/za-2024-13	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0552`	vulnerable	2026-06-08 06:22:01.333725	Intumit inc. SmartRobot - Remote Code Execution CRITICAL (9.8) Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server. Published: 2024-01-15T04:03:07.044Z Updated: 2024-10-14T06:11:21.141Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-7662-41d50-1.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.