Vulnerability Description
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netcommwireless | Hspa 3G10Wve Firmware | 3g10wve-l101-s306ets-c01_r03 |
| Netcommwireless | Hspa 3G10Wve | - |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-AuthentThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2016/May/13Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2016/May/18Mailing ListThird Party Advisory
- http://www.securityfocus.com/archive/1/538263/100/0/threaded
- http://www.securityfocus.com/archive/1/538297/100/0/threaded
- https://www.exploit-db.com/exploits/39762/Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-AuthentThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2016/May/13Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2016/May/18Mailing ListThird Party Advisory
- http://www.securityfocus.com/archive/1/538263/100/0/threaded
- http://www.securityfocus.com/archive/1/538297/100/0/threaded
- https://www.exploit-db.com/exploits/39762/Third Party AdvisoryVDB Entry
FAQ
What is CVE-2015-6024?
CVE-2015-6024 is a vulnerability with a CVSS score of 9.8 (CRITICAL). ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in ...
How severe is CVE-2015-6024?
CVE-2015-6024 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2015-6024?
Check the references section above for vendor advisories and patch information. Affected products include: Netcommwireless Hspa 3G10Wve Firmware, Netcommwireless Hspa 3G10Wve.