CVE-2015-6023

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands.

• CWE-284

• http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/May/13Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2016/May/18Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/538263/100/0/threaded
• http://www.securityfocus.com/archive/1/538297/100/0/threaded
• http://www.securityfocus.com/bid/96383Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/39762/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/May/13Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2016/May/18Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/538263/100/0/threaded
• http://www.securityfocus.com/archive/1/538297/100/0/threaded
• http://www.securityfocus.com/bid/96383Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/39762/Exploit, Third Party Advisory, VDB Entry

Published

Feb 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-6017Multiple cross-site scripting (XSS) vulnerabilities in Forms…
• CVE-2015-6018The diagnostic-ping implementation on ZyXEL PMG5318-B20A dev…
• CVE-2015-6019The management portal on ZyXEL PMG5318-B20A devices with fir…
• CVE-2015-6020ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow r…
• CVE-2015-6021Spiceworks Desktop before 2015-12-01 has XSS via an SNMP res…
• CVE-2015-6022Unrestricted file upload vulnerability in QNAP Signage Stati…
• CVE-2015-6024ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers wi…
• CVE-2015-6027Castle Rock Computing SNMPc before 2015-12-17 has XSS via SN…6.1
• CVE-2015-6028Castle Rock Computing SNMPc before 2015-12-17 has SQL inject…8.8
• CVE-2015-6029HP ArcSight Logger before 6.0 P2 does not limit attempts to …
• CVE-2015-6030HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8…
• CVE-2015-6031Buffer overflow in the IGDstartelt function in igd_desc_pars…