CVE-2018-7123: HPE Intelligent Management Center remote denial of service via improper authentication

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: medium.

high priorityCVSS 3.0 rates this 7.5 HIGH for remote unauthenticated availability impact, and EPSS is very high at the 99th percentile, though it is not in KEV and no exploit is referenced.

What it is

HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09 contain a remote denial of service flaw tied to improper authentication (CWE-287). A network-reachable attacker can disrupt the platform without credentials or user interaction, which matters because IMC is management infrastructure for network devices.

Impact

An attacker can cause a denial of service against the IMC PLAT service, degrading or halting management and monitoring of the managed network. There is no confidentiality or integrity impact per the CVSS vector; only availability is affected.

Attack surface

Reachable over the network (AV:N) with no privileges (PR:N) and no user interaction (UI:N), per the CVSS 3.0 vector. The description does not specify the exact endpoint or protocol, so the precise entry point is not documented in this record.

Exploitation

Not listed in CISA KEV and no public exploit or exploitation tags appear in the references, which are vendor advisories only. EPSS is high (0.57691, 99.039th percentile), indicating elevated predicted likelihood of exploitation activity.

What to do

• Upgrade HPE Intelligent Management Center PLAT to version 7.3 E0506P09 or later as specified in the vendor advisory.
• Restrict network access to IMC management interfaces to trusted administrative networks and hosts.
• Place IMC behind firewalls or access control lists so it is not exposed to untrusted networks.
• Monitor the vendor advisory page for updated guidance and any revised fixed versions.
• Maintain offline backups and a recovery plan for the IMC platform in case of service disruption.

Detection

• Monitor IMC PLAT service availability and restart/crash events for unexplained outages.
• Alert on anomalous or unexpected network traffic to IMC management ports from untrusted sources.
• Review IMC and host logs for authentication failures or malformed requests preceding service interruptions.
• Track availability metrics for the IMC platform to catch repeated or sustained denial-of-service conditions.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.