Critical severity9.8NVD Advisory· Published Feb 9, 2017· Updated Jun 17, 2026
CVE-2015-6024
CVE-2015-6024
Description
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:o:netcommwireless:hspa_3g10wve_firmware:3g10wve-l101-s306ets-c01_r03:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:netcommwireless:hspa_3g10wve_firmware:3g10wve-l101-s306ets-c01_r03:*:*:*:*:*:*:*
- (no CPE)range: <3G10WVE-L101-S306ETS-C01_R05
Patches
Vulnerability mechanics
References
6- packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.htmlnvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2016/May/13nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2016/May/18nvdMailing ListThird Party Advisory
- www.exploit-db.com/exploits/39762/nvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/538263/100/0/threadednvd
- www.securityfocus.com/archive/1/538297/100/0/threadednvd
News mentions
0No linked articles in our index yet.