A security vulnerability has been identified in H3C NX15 V100R017, specifically in the service.add function of the /api/esps Web API endpoint. The flaw exposes a dangerous routine that can be exploited remotely without physical access to the device. A public proof-of-concept exploit has been disclosed on GitHub, increasing the risk of active exploitation. The vulnerability was responsibly disclosed to the vendor prior to public release. This issue falls under the category of exposed dangerous routines in IoT networking equipment. The affected product is a network device manufactured by H3C, a prominent networking vendor. The exploit chain reportedly achieves root-level remote code execution. The public availability of the PoC significantly elevates the risk for unpatched deployments.