CVE-2025-3572

Опубликовано: 14 апр. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server.

Ссылки

https://www.twcert.org.tw/en/cp-139-10065-2494c-2.html
Third Party Advisory
https://www.twcert.org.tw/tw/cp-132-10064-6346a-1.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:intumit:smartrobot_firmware:*:*:*:*:*:*:*:*

Версия до 8.0.0 (исключая)

cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00072

Низкий

7.5 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVE-2025-3572

redhat

9 месяцев назад

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server.

GHSA-4g3w-2657-gjq5

CVSS3: 7.5

github

9 месяцев назад

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server.

EPSS

Процентиль: 22%

0.00072

Низкий

7.5 High

CVSS3

Дефекты

CWE-918