← CVE Intelligence

CVE-2024-2413

Intumit SmartRobot - Use of Hard-coded Cryptographic Key PUBLISHED

Description (CNA)

Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator privileges and subsequently execute arbitrary code on the remote server using built-in system functionality.

Affected (CNA)

Vendor / productVersions
Intumit / SmartRobotaffected earlier version through v6.1.2-202212tw

CWE

CWE-321

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.