EUVD-2026-95262
GHSA-6p2m-8pgg-gvw7
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach iMC management interface over network
-
DeliverySend crafted authentication-bypass request
-
ExploitObtain unauthorized authenticated session
-
ExecutionAccess admin functions and managed-device data
-
ImpactRead/alter network management configuration
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires network reachability to the HPE Intelligent Management Center (iMC) management service on a vulnerable instance running a version prior to v7.3 E0713; per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no authentication, user interaction, or special configuration is required against affected versions. The primary limiting factors are network exposure (iMC is typically deployed on internal management networks, so internet-facing exposure is the main amplifier of risk) and version - instances already upgraded to v7.3 E0713 or later are not affected. The specific feature or endpoint through which authentication is bypassed is not detailed in the available data. |
| Impact | This is a credible high-priority issue based on the available signals, though several key signals are absent. The vendor-supplied CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) describes a network-reachable, low-complexity, unauthenticated authentication bypass yielding high confidentiality and integrity impact (C:H/I:H), consistent with the 9.1 Critical score. Authentication bypasses on a centralized network management platform are inherently attractive because success grants control over managed infrastructure. However, no EPSS exploitation-probability score was provided, there is no CISA KEV listing in the input (not confirmed actively exploited), and no public exploit or POC is referenced - so exploitation probability cannot be quantified from this data. There is no SSVC decision data (exploitation status, automatable, technical impact) supplied either. The CWE is listed as N/A and the only reference is a vendor advisory behind HPE support, so the exact bypass mechanism is unverified. Net: treat as a genuine critical patching priority on exposure grounds, but note the real-world exploitation likelihood is currently unmeasured rather than demonstrated. |
| Exploit ScenarioDerived | A remote, unauthenticated attacker with network access to the HPE iMC management interface sends a crafted request that bypasses authentication, gaining access to administrative functions and the data of managed devices. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, no credentials, user interaction, or special timing are required. No public exploit code is identified at time of analysis, so exploitation would require independent research of the vendor-patched flaw. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 08, 2026
Authentication bypass in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 lets unauthenticated remote attackers reach functionality that should require a valid login, per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector, with high impact on confidentiality and integrity (C:H/I:H/A:N) and no reported availability impact. Any iMC instance running a build older than v7.3 E0713 and reachable over the network is exposed, and because iMC is an enterprise network management platform, compromise can expose managed-device credentials and configuration data and allow unauthorized changes. No public exploit code was identified at time of analysis and the CVE is not confirmed as actively exploited (CISA KEV), though the vendor advisory and the 9.1 base score warrant urgent patching on internet- or broadly reachable deployments.
RemediationAI
Vendor-released patch: HPE iMC v7.3 E0713 - upgrade every affected instance to v7.3 E0713 or later, following the instructions in the HPE advisory at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05157en_us, and verify the running build after the upgrade since the affected-version boundary is defined by that exact release. Because the assessed vector requires only network reachability with no authentication (AV:N/AC:L/PR:N/UI:N), the most effective interim control is to remove exposure: restrict access to the iMC management web and service ports to a tightly scoped set of trusted administrative source addresses using host firewalls or upstream ACLs, and keep the platform off the public internet and off broadly routable corporate segments - the trade-off is that remote and third-party administrators lose direct access until they are inside the permitted range. Additional compensating controls with their downsides: place iMC behind an authenticating reverse proxy or VPN so unauthenticated requests never reach the service (adds a dependency and can break integrations that expect direct access), and increase logging/alerting on iMC authentication and administrative actions to detect bypass attempts (detection only, does not prevent exploitation). Do not rely on segmentation alone as a fix - it limits reachability but leaves the underlying bypass present on unpatched builds, so schedule the upgrade regardless. No vendor-published workaround beyond patching is identified in the supplied data.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
HPE Intelligent Management Center (iMC) is a centralized enterprise platform for fault, configuration, performance, and access management of network infrastructure, typically deployed on internal management VLANs and accessed through a web/management service. The flaw is an authentication bypass: the affected service accepts requests and grants access to protected functions without validating credentials, which aligns with the improper-authentication class (CWE-287-style weaknesses), although no CWE mapping was supplied in the source data. The provided CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N indicates the attacker needs only network reachability to the management service - no account, no user interaction, no special conditions - and that successful exploitation yields high confidentiality and integrity impact within the iMC scope while availability impact is not assessed (A:N). The precise endpoint, parameter, or authentication component that is bypassed is not disclosed in the available references, and the affected CPE (cpe:2.3:a:hewlett_packard_enterprise:hpe_intelligent_management_center_(imc):*:*:*:*:*:*:*) does not pin a version, so version determination must be made on the deployed build itself.
Know when Hpe Intelligent Management Center Imc gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Unauthenticated network-reachable auth bypass gives AV:N/AC:L/PR:N/UI:N; bypass yields high confidentiality and integrity but no stated availability impact, so A:N.
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
Lifecycle Timeline
2DescriptionCVE.org
An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713
Executive ViewAI
HPE Intelligent Management Center (iMC) instances running builds older than v7.3 E0713 can be accessed by an unauthenticated remote attacker, bypassing the login that protects the platform used to administer the organization's network infrastructure. Because iMC holds managed-device credentials and configuration data, a compromise could allow an attacker to read sensitive credentials and make unauthorized changes to network devices at scale. No vendor patch has been identified and no public exploit or confirmed active exploitation is known at this time, but the exposure is network-reachable and requires immediate containment by the teams that own network management infrastructure.
No vendor-released patch identified at time of analysis; per the vendor advisory, remediation is upgrade to v7.3 E0713. Interim mitigations: remove iMC from internet-facing exposure and restrict reachable source IPs via firewall/ACL or VPN; require access only through hardened administrator jump hosts; enforce least-privilege and separate admin accounts; enable and monitor authentication and configuration-change logging; urgently engage HPE support for an available fix or hotfix.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Exploit-DB