Skip to content
OpenAdvisories

Vendor

INTUMIT

5 known vulnerabilities.

Products

SmartRobot 4 SmartRobot′s Conversational AI Platform 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-12652

    Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')

    A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code.

    INTUMIT SmartRobot′s Conversational AI Platform
  • Critical 9.8
    CVE-2024-2413

    Intumit SmartRobot - Use of Hard-coded Cryptographic Key

    Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator…

    INTUMIT SmartRobot
  • Critical 9.8
    CVE-2024-0552

    Intumit inc. SmartRobot - Remote Code Execution

    Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.

    INTUMIT SmartRobot