Back to Database
Status published
Critical
CVE-2024-2413
Intumit SmartRobot - Use of Hard-coded Cryptographic Key
Vulnerability Description
Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator privileges and subsequently execute arbitrary code on the remote server using built-in system functionality.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2413
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
Intumit
View all reports →Affected Software
SmartRobot
Vulnerable Versions:
earlier version
Timeline
Official Publish:
March 13th, 2024
Last Modified:
April 15th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H