Approved changes feed: RSS · Atom

cpe:2.3:a:h3c_group:intelligent_management_center_(imc):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorH3C Group (5d0e7be9-0b21-5019-b176-adcb6ce674fe)
ProductIntelligent Management Center (Imc) (c1542695-3b8e-51c7-a17a-08d13b0230b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-13980 vulnerable 2026-06-08 06:25:38.816563 H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE
H3C Intelligent Management Center (IMC) versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters, potentially leading to arbitrary command execution. This flaw does not require authentication and may be exploited without session cookies. An affected version range is undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-08-28 UTC.
Published: 2025-08-27T21:25:05.918Z
Updated: 2026-05-15T11:14:30.684Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.