CVE-2024-13980: H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE
H3C Intelligent Management Center (IMC) versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters, potentially leading to arbitrary command execution. This flaw does not require authentication and may be exploited without session cookies. An affected version range is undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-08-28 UTC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13980?
CVE-2024-13980 is classified as a critical vulnerability due to its potential for remote command execution.
How do I fix CVE-2024-13980?
To mitigate CVE-2024-13980, upgrade H3C Intelligent Management Center (IMC) to a version later than E0632H07.
What are the potential impacts of CVE-2024-13980?
CVE-2024-13980 allows unauthorized attackers to execute arbitrary commands on the server via crafted POST requests.
Which versions of H3C Intelligent Management Center (IMC) are affected by CVE-2024-13980?
CVE-2024-13980 affects H3C Intelligent Management Center (IMC) versions up to and including E0632H07.
What component of H3C Intelligent Management Center (IMC) is vulnerable in CVE-2024-13980?
CVE-2024-13980 specifically affects the /byod/index.xhtml endpoint within H3C Intelligent Management Center (IMC).