An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password