A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the component Backend RPC. This manipulation o…

A critical OS command injection vulnerability has been identified in H3C NX15 V100R017. The flaw exists in the file.exec function within the /api/esps endpoint of the Backend RPC component. An attacker can manipulate the 'File' argument to inject arbitrary OS commands remotely. The vulnerability can be exploited without physical access, making it a remote attack vector. A public proof-of-concept exploit has already been released on GitHub, increasing the risk of active exploitation. The vendor was notified prior to public disclosure. The vulnerability is classified as high severity given its remote exploitability and public exploit availability. It affects IoT/networking hardware manufactured by H3C.