CVE-2024-13980

🗓️ 27 Aug 2025 21:25:05Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 11 Views🌐 WEB

Unauthenticated command execution in H3C IMC up to E0632H07 via forged ViewState.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-13980	29 Aug 202521:02	–	circl
CNNVD	H3C Intelligent Management Center 安全漏洞	27 Aug 202500:00	–	cnnvd
Cvelist	CVE-2024-13980 H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE	27 Aug 202521:25	–	cvelist
EUVD	EUVD-2024-54922	3 Oct 202520:07	–	euvd
NVD	CVE-2024-13980	27 Aug 202522:15	–	nvd
OSV	CVE-2024-13980	27 Aug 202522:15	–	osv
Positive Technologies	PT-2025-34939 · H3C · H3C Intelligent Management Center	27 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-13980	30 Aug 202518:16	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2024-13980	28 Aug 202400:00	–	vulncheck_kev
Vulnrichment	CVE-2024-13980 H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE	27 Aug 202521:25	–	vulnrichment

Vulners

CNA

Node

h3c_group intelligent_management_centerRange0–e0632h07

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "/byod/index.xhtml"
    ],
    "product": "Intelligent Management Center (iMC)",
    "vendor": "H3C Group",
    "versions": [
      {
        "lessThanOrEqual": "E0632H07",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
blog	www.blog.csdn.net/weixin_48539059/article/details/141033966
h3c	www.h3c.com/cn/Service/Online_Help/psirt/
github	www.github.com/OJZen/FckESC/blob/master/%E5%86%85%E7%BD%91%E7%99%BB%E5%BD%95%E8%BF%87%E7%A8%8B.txt
vulncheck	www.vulncheck.com/advisories/h3c-intelligent-management-center-rce
axsec	www.axsec.blog.csdn.net/article/details/141003376
blog	www.blog.csdn.net/nnn2188185/article/details/141065540

Parameter	Position	Path	Description	CWE
javax.faces.ViewState	request body	/byod/index.xhtml	Remote command execution via forged JSF ViewState in /byod/index.xhtml allowing unauthenticated attackers to execute arbitrary commands.	CWE-502

15 May 2026 11:14Current

7.1High risk

Vulners AI Score7.1

CVSS 410

EPSS0.02906

SSVC

CWE-502