This vulnerability affects the H3C NX15 product, where the Add function in the /api/esps endpoint improperly handles the esps.filter.url argument, allowing remote attackers to perform command injection. The vulnerability has a CVSS 4.0 base score of 8.6, indicating high severity with network attack vector, low attack complexity, and no user interaction required. Although the vendor was contacted early, no official fix or mitigation details have been disclosed. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected system with high privileges, potentially leading to full system compromise. This can result in unauthorized control over the device, data breaches, or disruption of network services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the vulnerable API endpoint and monitor for suspicious activity related to esps.filter.url parameter usage.