Lucene search

TwcertCVE-2024-0552

HistoryJan 15, 2024 - 4:15 a.m.

CVE-2024-0552

2024-01-1504:15:08

CWE-74

twcert

web.nvd.nist.gov

intumit inc.

smartrobot

web framework

remote code execution

vulnerability

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

53.2%

JSON

Intumit inc. SmartRobot’s web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.

Affected configurations

Nvd

Node

intumitsmartrobotMatch-

AND

intumitsmartrobot_firmwareRange≤6.0.0-202012tw

VendorProductVersionCPE
intumitsmartrobot-cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*
intumitsmartrobot_firmware*cpe:2.3:o:intumit:smartrobot_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intumit	smartrobot	-	cpe:2.3:h:intumit:smartrobot:-:::::::*
intumit	smartrobot_firmware	*	cpe:2.3:o:intumit:smartrobot_firmware::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SmartRobot",
    "vendor": "Intumit inc.",
    "versions": [
      {
        "lessThanOrEqual": "v6.0.0-202012tw",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  }
]

References

www.twcert.org.tw/tw/cp-132-7662-41d50-1.html

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

53.2%

JSON

Related for CVE-2024-0552