Coconut

**Name of the Vulnerable Software and Affected Versions** H3C NX15 version V100R017 **Description** A flaw in the Web API component allows remote attackers to access a dangerous routine. This occurs through the `service.add()` function within the '/api/esps' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/api/esps' endpoint or disable the `service.add()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** H3C NX15 version V100R017 **Description** A command injection issue exists in the `/api/esps` file within the `esps.wan.repeater.set/repeaterproc()` function. This occurs when the `my2P4key` argument is manipulated, allowing for remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/api/esps` endpoint or avoid using the `my2P4key` argument until a patch is available.

**Name of the Vulnerable Software and Affected Versions** H3C NX15 version V100R017 **Description** A weakness in the Backend RPC component allows for remote OS command injection. This occurs through the manipulation of the `File` argument within the `file.exec()` function of the '/api/esps' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/api/esps' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** H3C NX15 version V100R017 **Description** A command injection flaw exists that allows remote attackers to execute arbitrary commands. The issue is located in the `/api/esps` endpoint within the `esps.ipv6.wan()` function, specifically triggered by manipulating the `workMode` variable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/api/esps` endpoint or avoid using the `workMode` parameter within the `esps.ipv6.wan()` function.

**Name of the Vulnerable Software and Affected Versions** H3C NX15 version V100R017 **Description** A remote command injection issue exists in the `/api/esps` endpoint. The flaw is located within the `reload.reload config()` function, allowing a remote attacker to execute arbitrary commands on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/api/esps` endpoint or disable the `reload.reload config()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** H3C NX15 version V100R017 **Description** A remote command injection issue exists in the `delete` function of the '/api/esps' endpoint. This occurs when the `esps.apcm.version` argument is manipulated, allowing an attacker to execute arbitrary commands on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `esps.apcm.version` parameter in the '/api/esps' endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** H3C NX15 version V100R017 **Description** A remote issue exists in the `/api/wizard/networkSetup` endpoint. Manipulation of an unknown function within this file allows an attacker to bypass authentication. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/api/wizard/networkSetup` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** H3C NX15 version V100R017 **Description** A command injection issue exists that allows remote attackers to execute arbitrary commands. The flaw is located in the `Add()` function of the '/api/esps' endpoint, where improper handling of the `esps.filter.url` variable enables the injection. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/api/esps' endpoint or avoid using the `esps.filter.url` parameter.

**Name of the Vulnerable Software and Affected Versions** H3C NX15 version V100R017 **Description** A flaw exists in the Administrator Password Modification Endpoint within the `change passwd()` function of the '/api/login/modify' endpoint. Remote manipulation of the `newPass` argument can lead to weak password recovery. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/api/login/modify' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** GL.iNet GL-MT3000 versions prior to 4.4.6 **Description** A command injection issue exists in the nas-web RPC Wrapper component within the `/cgi-bin/glc` file. The flaw is located in the `nas-web.add user()` function, where the software fails to properly neutralize special elements in the output data. This allows a remote attacker to execute arbitrary commands on the device. **Recommendations** Update GL.iNet GL-MT3000 to version 4.4.6 or later. As a temporary mitigation, restrict access to the `/cgi-bin/glc` endpoint or disable the `nas-web.add user()` function.