Hpe Intelligent Management Center Imc
Monthly
Authentication bypass in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 lets unauthenticated remote attackers reach functionality that should require a valid login, per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector, with high impact on confidentiality and integrity (C:H/I:H/A:N) and no reported availability impact. Any iMC instance running a build older than v7.3 E0713 and reachable over the network is exposed, and because iMC is an enterprise network management platform, compromise can expose managed-device credentials and configuration data and allow unauthorized changes. No public exploit code was identified at time of analysis and the CVE is not confirmed as actively exploited (CISA KEV), though the vendor advisory and the 9.1 base score warrant urgent patching on internet- or broadly reachable deployments.
Authentication bypass in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 lets unauthenticated remote attackers reach functionality that should require a valid login, per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector, with high impact on confidentiality and integrity (C:H/I:H/A:N) and no reported availability impact. Any iMC instance running a build older than v7.3 E0713 and reachable over the network is exposed, and because iMC is an enterprise network management platform, compromise can expose managed-device credentials and configuration data and allow unauthorized changes. No public exploit code was identified at time of analysis and the CVE is not confirmed as actively exploited (CISA KEV), though the vendor advisory and the 9.1 base score warrant urgent patching on internet- or broadly reachable deployments.