Description
A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Published: 2026-08-04
Score: 8.6 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability resides in the Add function of /api/esps on H3C NX15 routers. By manipulating the esps.filter.url parameter, an attacker can inject arbitrary shell commands. The flaw is classified as command injection (CWE‑74 and CWE‑77) and allows remote execution of OS commands without authentication. The impact is complete compromise of the affected device, including unauthorized access, data exfiltration, and possible use as a pivot for further attacks.

Affected Systems

Affected systems are H3C NX15 routers running firmware version V100R017. Only this build is confirmed vulnerable; other firmware revisions may or may not be impacted. Administrators should verify if their fleet runs this version.

Risk and Exploitability

The CVSS score of 8.6 indicates a high severity level. EPSS is not available, but the existence of public exploits and remote attack surface suggests a realistic exploitation probability. The vulnerability is not yet listed in the CISA KEV catalog. Attackers can reach the vulnerable endpoint over the network; therefore, the exploitation vector is remote network. Immediate remediation is essential to prevent possible compromise.

Generated by OpenCVE AI on August 4, 2026 at 21:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor‑issued firmware update that addresses the esps.filter.url injection flaw.
  • If no update is available, restrict access to the /api/esps endpoint by configuring firewall or ACL to allow only trusted IP addresses.
  • Disable the esps feature if it is not required for your network.
  • Monitor device logs for anomalous parameters or command execution attempts.

Generated by OpenCVE AI on August 4, 2026 at 21:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 20:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Title H3C NX15 esps add command injection
First Time appeared H3c
H3c nx15
Weaknesses CWE-74
CWE-77
CPEs cpe:2.3:a:h3c:nx15:*:*:*:*:*:*:*:*
Vendors & Products H3c
H3c nx15
References
Metrics cvssV2_0

{'score': 8.3, 'vector': 'AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.2, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

H3c Nx15
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-04T20:15:07.634Z

Reserved: 2026-08-04T12:46:06.567Z

Link: CVE-2026-18811

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T21:30:12Z

Weaknesses
  • CWE-74

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')