What is CVE-2024-13980?

CVE-2024-13980 is a vulnerability in H3c Group Intelligent Management Center (Imc), classified under Deserialization of Untrusted Data. Published 2025-08-27.

Is CVE-2024-13980 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Deserialization in H3c Group Intelligent Management Center (Imc)

CVE-2024-13980

H3C Intelligent Management Center (IMC) versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters, potentially leading to arbitrary command execution. This flaw does not require authentication and may be exploited without session cookies. An affected version range is undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-08-28 UTC.

Vulnerability class: Insecure Deserialization

EPSS: 0.010 (58.3th percentile) — read the EPSS interpretation.

Affected products

H3c Group Intelligent Management Center (Imc) — versions 0

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (technical-description, exploit)
disclosure@vulncheck.com (technical-description, exploit)
disclosure@vulncheck.com (technical-description, exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2024-13980?: CVE-2024-13980 is a vulnerability in H3c Group Intelligent Management Center (Imc), classified under Deserialization of Untrusted Data. Published 2025-08-27.
Is CVE-2024-13980 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.