A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument w…

A critical command injection vulnerability has been identified in H3C NX15 V100R017 routers. The flaw resides in the function esps.ipv6.wan within the /api/esps endpoint. An attacker can manipulate the workMode argument to achieve remote command injection, potentially leading to root-level remote code execution. The attack can be launched remotely without physical access to the device. A public exploit has already been published on GitHub, increasing the risk of active exploitation. The vendor was notified prior to public disclosure. This vulnerability poses a significant risk to IoT and network infrastructure environments using affected H3C devices.