CVE-2026-112372
MediumCVSS 6.6Summary
A weakness has been identified in H3C Magic NX15 V100R017 affecting the importprofile function in the /api/upload file. Manipulation of the fileName argument causes path traversal, the attack can be initiated remotely, and the exploit has been made publicly available.
Risk Assessment
A remote attacker could exploit the path traversal to gain unauthorized access to files or write outside the intended directory. Since the exploit is publicly available, the risk of active exploitation is high.
Recommendation
Update H3C Magic NX15 firmware to a patched version or apply mitigations recommended by the vendor. Until patched, restrict access to the device management interface.
Other vulnerabilities in H3C Magic NX15
See all- CVE-2026-112371Critical
In H3C Magic NX15 NX15V100R017, the write function of /api/esps in the RPC Interface allows manipulation of the path argument to lead to code injection. The attack can be executed remotely, and the exploit has been publicly disclosed.
- CVE-2026-112370Critical
In H3C Magic NX15 100R017, the function sub_416874 in /usr/bin/usrlist allows OS command injection. Remote exploitation is possible, and the exploit has been made public.
Original NVD description (English source)
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS