CVE-2024-0552 Intumit inc. SmartRobot - Remote Code Execution
An unauthorized remote attacker can execute arbitrary commands on the SmartRobot server due to a vulnerability in its web framework.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-0552?
CVE-2024-0552 is a critical command injection vulnerability in Intumit inc. SmartRobot, published on 15 Jan 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.
Which versions are affected by CVE-2024-0552?
It affects 1 product.
Products include Intumit Smartrobot.
How do I fix CVE-2024-0552?
No fix has been published for CVE-2024-0552 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2024-0552 being exploited?
There is no known exploitation of CVE-2024-0552 in the wild and no public exploit code.
Other vulnerabilities in Intumit inc. SmartRobot
- CVE-2024-2413 Intumit SmartRobot - Use of Hard-coded Cryptographic Key
- CVE-2024-12652 Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')
- CVE-2025-3572 INTUMIT SmartRobot - Server-Side Request Forgery
- CVE-2024-8776 INTUMIT SmartRobot - Cross-site Scripting
Sources
Also known as GHSA-4354-qq9g-jmhv.