Description
A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/repeaterproc of the file /api/esps. Performing a manipulation of the argument my2P4key results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Published: 2026-08-05
Score: 8.6 High
EPSS: 2.4% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability resides in the esps.wan.repeater.set/repeaterproc API endpoint of H3C NX15 V100R017 firmware. By manipulating the my2P4key parameter, an attacker can inject shell commands, leading to remote code execution. This allows an attacker full control over the device from a remote session, potentially compromising the entire network.

Affected Systems

H3C NX15 routers running firmware V100R017 are affected. No other versions are specified as vulnerable, but the CPE identifier cpe:2.3:a:h3c:nx15:*:*:*:*:*:*:*:* indicates that devices with this product and firmware are in scope.

Risk and Exploitability

The CVSS score of 8.6 reflects high severity, and the exploit is publicly available, though the EPSS score is not provided. The attack vector is remote, requiring only network access to the API. The vulnerability is not listed in the CISA KEV catalog, yet its high score and public availability mean the risk remains significant, especially if the device is exposed to the internet.

Generated by OpenCVE AI on August 5, 2026 at 06:26 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor-provided firmware update that addresses the command injection flaw.
  • If an update is not immediately available, limit network exposure by blocking or restricting access to the /api/esps endpoint, or isolate the device behind a firewall that prevents external interaction with that API.
  • Configure and monitor system logs for unexpected invocations of the esps.wan.repeater.set/repeaterproc call and for anomalous command execution activity.

Generated by OpenCVE AI on August 5, 2026 at 06:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Aug 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 05 Aug 2026 05:30:00 +0000

Type Values Removed Values Added
Description A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/repeaterproc of the file /api/esps. Performing a manipulation of the argument my2P4key results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Title H3C NX15 esps repeaterproc command injection
First Time appeared H3c
H3c nx15
Weaknesses CWE-74
CWE-77
CPEs cpe:2.3:a:h3c:nx15:*:*:*:*:*:*:*:*
Vendors & Products H3c
H3c nx15
References
Metrics cvssV2_0

{'score': 8.3, 'vector': 'AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.2, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

H3c Nx15
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-05T13:32:29.133Z

Reserved: 2026-08-04T20:05:21.127Z

Link: CVE-2026-18902

cve-icon Vulnrichment

Updated: 2026-08-05T13:32:24.223Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-05T09:45:06Z

Weaknesses
  • CWE-74

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')