CVE-2025-3572 - CVE House

Status published High CVE-2025-3572

INTUMIT SmartRobot - Server-Side Request Forgery

7.5 CVSS

Vulnerability Description

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3572

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from INTUMIT

View All →

CVE-2024-8776

INTUMIT SmartRobot - Cross-site Scripting

Medium 6.1

Affected Vendor

INTUMIT

View all reports →

Affected Software

SmartRobot

Vulnerable Versions:

Timeline

Official Publish: April 14th, 2025

Last Modified: April 14th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-918

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1213 Data from Information Repositories

Collection

T1005 Data from Local System