GCVE - cpe:2.3:a:h3c:nx15:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:h3c:nx15:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	H3C (`17378f50-e353-55bc-ad2a-c62425dcc44c`)
Product	Nx15 (`da9f7a4d-ee59-50eb-8b26-22a18fe78e99`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-18814`	vulnerable	2026-09-16 04:34:02.236004	H3C NX15 esps reload.reload_config command injection HIGH (7.2) A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. The manipulation results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure. Published: 2026-08-04T21:15:09.662Z Updated: 2026-08-05T14:28:34.927Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/385813 https://vuldb.com/vuln/385813/cti https://vuldb.com/cve/CVE-2026-18814 https://vuldb.com/submit/857813 https://github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/service_add_root_rce	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18810`	vulnerable	2026-09-16 04:34:02.208461	H3C NX15 networkSetup missing authentication HIGH (7.3) A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard/networkSetup. Such manipulation leads to missing authentication. The attack may be performed from remote. The vendor was contacted early about this disclosure. Published: 2026-08-04T20:00:09.017Z Updated: 2026-08-05T14:47:30.970Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/385809 https://vuldb.com/vuln/385809/cti https://vuldb.com/cve/CVE-2026-18810 https://vuldb.com/submit/857805 https://github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/api_wizard_networksetup_preauth_hijack	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18902`	vulnerable	2026-09-16 04:34:02.182192	H3C NX15 esps repeaterproc command injection HIGH (7.2) A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/repeaterproc of the file /api/esps. Performing a manipulation of the argument my2P4key results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure. Published: 2026-08-05T04:30:08.990Z Updated: 2026-08-05T13:32:29.133Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/385936 https://vuldb.com/vuln/385936/cti https://vuldb.com/cve/CVE-2026-18902 https://vuldb.com/submit/857833 https://github.com/coconut652-7/IOT_Vul_Public/blob/main/H3C/NX15R017/esps.wan.repeater.set-repeaterproc/report/postauth_esps_wan_repeater_repeaterproc_rce_report.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18811`	vulnerable	2026-09-16 04:34:01.938385	H3C NX15 esps add command injection HIGH (7.2) A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure. Published: 2026-08-04T20:15:07.634Z Updated: 2026-08-05T14:58:27.435Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/385810 https://vuldb.com/vuln/385810/cti https://vuldb.com/cve/CVE-2026-18811 https://vuldb.com/submit/857807 https://github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_filter_url_add_root_rce	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18901`	vulnerable	2026-09-16 04:34:01.914602	H3C NX15 Web API esps service.add routine HIGH (7.2) A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exposed dangerous routine. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure. Published: 2026-08-05T04:00:10.979Z Updated: 2026-08-05T14:27:47.346Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/385935 https://vuldb.com/vuln/385935/cti https://vuldb.com/cve/CVE-2026-18901 https://vuldb.com/submit/857817 https://github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/service_add_root_rce_chain/report	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18813`	vulnerable	2026-09-16 04:34:01.778774	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18812`	vulnerable	2026-09-16 04:34:01.680511	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18900`	vulnerable	2026-09-16 04:34:01.642893	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-15479`	vulnerable	2026-07-29 00:26:18.140447	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.