{"id":86190,"date":"2026-01-02T23:06:10","date_gmt":"2026-01-02T23:06:10","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-3572-server-side-request-forgery-vulnerability-in-smartrobot-from-intumit","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-3572-server-side-request-forgery-vulnerability-in-smartrobot-from-intumit\/","title":{"rendered":"CVE-2025-3572: Server-Side Request Forgery Vulnerability in SmartRobot from INTUMIT<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-3572 is a significant server-side request forgery vulnerability discovered in INTUMIT’s SmartRobot. It poses a direct threat to the security of network systems using this product, allowing remote unauthenticated attackers the potential to probe internal networks and access local files on the server. This vulnerability is of particular concern due to its potential for data leakage or even full system compromise.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-3572
\nSeverity: High (7.5 CVSS score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Unauthenticated remote attackers can probe internal networks and access local files on the server, possibly leading to system compromise and data leakage.<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n