Product
An unauthenticated command injection vulnerability in the sub_416874 function of H3C Magic NX15 (100R017) allows remote attackers to execute arbitrary system commands via /usr/bin/usrlist.