CVE-2015-6024

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2016/May/13Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2016/May/18Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/538263/100/0/threaded
http://www.securityfocus.com/archive/1/538297/100/0/threaded
https://www.exploit-db.com/exploits/39762/Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2016/May/13Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2016/May/18Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/538263/100/0/threaded
http://www.securityfocus.com/archive/1/538297/100/0/threaded
https://www.exploit-db.com/exploits/39762/Third Party Advisory, VDB Entry

Timeline

Published: Feb 9, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-60276.1Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP.CVE-2015-60288.8Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter.CVE-2015-60295.0HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers t CVE-2015-60307.2HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to CVE-2015-60316.8Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPN CVE-2015-60329.3Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code CVE-2015-60339.3Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers CVE-2015-60346.9EPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which allows local users to gain privileges via a CVE-2015-60356.1Opsview before 2015-11-06 has XSS via SNMP.CVE-2015-60367.5QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP reques CVE-2015-60373.5Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, E CVE-2015-60389.3Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Comp