CVE-2015-6023

moderate-risk

Published 2017-02-09

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands.

Do I need to act?

21.6% chance of exploitation in next 30 days

EPSS score — higher than 78% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

1 public exploit available

39762

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.3/10 High

NETWORK / LOW complexity

Affected Products (1)

Hspa 3G10Wve Firmware

Affected Vendors

Netcommwireless

References (14)

Exploit http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authent...

Exploit http://seclists.org/fulldisclosure/2016/May/13

Mailing List http://seclists.org/fulldisclosure/2016/May/18

http://www.securityfocus.com/archive/1/538263/100/0/threaded

http://www.securityfocus.com/archive/1/538297/100/0/threaded

Third Party Advisory http://www.securityfocus.com/bid/96383

Exploit https://www.exploit-db.com/exploits/39762/

Exploit http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authent...

Exploit http://seclists.org/fulldisclosure/2016/May/13

Mailing List http://seclists.org/fulldisclosure/2016/May/18

http://www.securityfocus.com/archive/1/538263/100/0/threaded

http://www.securityfocus.com/archive/1/538297/100/0/threaded

Third Party Advisory http://www.securityfocus.com/bid/96383

Exploit https://www.exploit-db.com/exploits/39762/

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 14/34 · Moderate

Exposure 5/34 · Minimal