CVE-2025-3572CWE-918

INTUMIT SmartRobot - Server-Side Request Forgery

High · published April 14, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.5th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-04-14T01:38Z
EPSS history
Timeline
  • 14 APR 01:38Z
    INTUMIT SmartRobot - Server-Side Request Forgery
    cvelistv5