Description
H3C iMC智能管理中心是一款基于B/S架构的综合网络管理产品，旨在为网络管理员提供集成资源、用户和网络服务的解决方案，实现网络的端到端管理。该产品中存在一个远程代码执行漏洞，攻击者可以利用这个漏洞执行任意代码。
H3C iMC智能管理中心 /byod/index.xhtml 代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Sec-Fork/POC-20250106/blob/main/H3C/H3C-iMC%E6%99%BA%E8%83%BD%E7%AE%A1%E7%90%86%E4%B8%AD%E5%BF%83%E5%AD%98%E5%9C%A8%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(XVE-2024-4567).md
https://www.vulncheck.com/advisories/h3c-intelligent-management-center-rce
https://nvd.nist.gov/vuln/detail/CVE-2024-13980
https://zhiliao.h3c.com/questions/dispcont/272223
https://blog.csdn.net/2401_86120759/article/details/143122878
https://rivers.chaitin.cn/blog/cqq52a10lnec5jjugdcg
https://netc.shcmusic.edu.cn/2024/0807/c1811a54654/pagem.htm
https://x.threatbook.com/v5/article?threatInfoID=127193
https://ddpoc.com/DVB-2024-7903.html
https://cn-sec.com/archives/3191651.html
https://zhuanlan.zhihu.com/p/624059379
https://www.yingjikeji.cn/sys-nd/370.html