Vulnerability Description
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netcommwireless | Hspa 3G10Wve Firmware | 3g10wve-l101-s306ets-c01_r03 |
| Netcommwireless | Hspa 3G10Wve | - |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-AuthentExploitThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2016/May/13ExploitMailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2016/May/18Mailing ListThird Party Advisory
- http://www.securityfocus.com/archive/1/538263/100/0/threaded
- http://www.securityfocus.com/archive/1/538297/100/0/threaded
- http://www.securityfocus.com/bid/96383Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/39762/ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-AuthentExploitThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2016/May/13ExploitMailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2016/May/18Mailing ListThird Party Advisory
- http://www.securityfocus.com/archive/1/538263/100/0/threaded
- http://www.securityfocus.com/archive/1/538297/100/0/threaded
- http://www.securityfocus.com/bid/96383Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/39762/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2015-6023?
CVE-2015-6023 is a vulnerability with a CVSS score of 7.3 (HIGH). ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: ...
How severe is CVE-2015-6023?
CVE-2015-6023 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-6023?
Check the references section above for vendor advisories and patch information. Affected products include: Netcommwireless Hspa 3G10Wve Firmware, Netcommwireless Hspa 3G10Wve.