← back
CVE-2015-6024

CVE-2015-6024

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 26%
from disclosure to weapon0 days
Published on NVDFeb 9
1st PoCMay 4
exploitation probability
26%top 2% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.htmlunverifiedcve_referencewww.exploit-db.com/exploits/39762/unverifiedexploitdbwww.exploit-db.com/exploits/39762unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.htmlhttp://seclists.org/fulldisclosure/2016/May/13http://seclists.org/fulldisclosure/2016/May/18https://www.exploit-db.com/exploits/39762/http://www.securityfocus.com/archive/1/538263/100/0/threadedhttp://www.securityfocus.com/archive/1/538297/100/0/threaded