CVE-2024-13980: Deserialization of Untrusted Data

H3C Intelligent Management Center IMC versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters,...

File Upload Vulnerability in H3C Intelligent Management Center of Xinhua San Technologies Co.

Xinhua San Technology Co., Ltd. is a global leader in digital solutions. A file upload vulnerability exists in the H3C Intelligent Management Center of Xinhua San Technologies Limited, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in H3C Intelligent Management Center

H3C Intelligent Management Center hereinafter referred to as H3C iMC is a business intelligence management platform. A command execution vulnerability exists in H3C Intelligent Management Center. An attacker can exploit the vulnerability to cause remote command execution by constructing a special...

Weak Password Vulnerability in Xinhua's H3C Intelligent Management Center

The scope of business of Xinhua San Technology Co., Ltd. includes: technology development, technical services, technical consulting, transfer of achievements, production, sales: electronic products, software, data communication equipment, broadband access equipment, network security equipment,...

ZDI-11-163: HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability

ZDI-11-163: HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-163 May 10, 2011 -- CVE ID: CVE-2011-1851 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

ZDI-11-164: HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability

ZDI-11-164: HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-164 May 10, 2011 -- CVE ID: CVE-2011-1852 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected...

ZDI-11-162: HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability

ZDI-11-162: HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-162 May 10, 2011 -- CVE ID: CVE-2011-1850 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...