A command injection vulnerability has been identified in H3C NX15 V100R017, specifically in the delete function of the /api/esps endpoint. The vulnerability is triggered by manipulating the esps.apcm.version argument, allowing an attacker to inject arbitrary commands. The attack can be initiated remotely without requiring physical access to the device. A public exploit has already been disclosed and made available, increasing the risk of exploitation in the wild. The vendor was notified prior to public disclosure. This vulnerability poses a significant risk to IoT and network infrastructure devices running the affected firmware version.