Approved changes feed: RSS · Atom

cpe:2.3:a:h3c:nx15:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorH3C (17378f50-e353-55bc-ad2a-c62425dcc44c)
ProductNx15 (da9f7a4d-ee59-50eb-8b26-22a18fe78e99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15479 vulnerable 2026-07-29 00:26:18.140447 H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery
HIGH (7.3)
A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Published: 2026-07-12T05:00:10.927Z
Updated: 2026-07-14T14:39:21.478Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.