CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the H3C NX15 V100R017, specifically within the esps.ipv6.wan function of the /api/esps file, which can be exploited remotely by manipulating the workMode argument. This flaw poses a high risk as it allows attackers to execute arbitrary commands on the affected system. Organizations using this product should prioritize patching or mitigating this vulnerability to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument workMode can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.