CVE-2015-6023 ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: t...
HighCVSS 7.3
EPSS 11.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netcommwireless hspa 3g10wve firmware | = 3g10wve-l101-s306ets-c01_r03 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160506 NetCommWireless HSPA 3G10WVE Wireless Router - Multiple vulnerabilities exploit mailing-list third-party-advisory
- 20160506 Re: NetCommWireless HSPA 3G10WVE Wireless Router - Multiple vulnerabilities mailing-list third-party-advisory
- 20160503 NetCommWireless HSPA 3G10WVE Wireless Router Multiple vulnerabilities mailing-list
- 20160505 Re: NetCommWireless HSPA 3G10WVE Wireless Router Multiple vulnerabilities mailing-list
- 96383 third-party-advisory vdb-entry
- 39762 exploit third-party-advisory vdb-entry