PT-2017-6918

Name of the Vulnerable Software and Affected Versions NetCommWireless HSPA 3G10WVE wireless routers versions prior to 3G10WVE-L101-S306ETS-C01 R05 Description The issue allows remote attackers to bypass intended access restrictions via a direct request to the ping.cgi endpoint. This can potential...

CVE-2015-6024: Improper Neutralization of Special Elements used in a Command

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIAIPADDRESS parameter...

CVE-2015-6023: Improper Access Control

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands...

NetCommWireless HSPA 3G10WVE Authentication Bypass

No description provided by source...

PT-2016-3221

Name of the Vulnerable Software and Affected Versions NetCommWireless HSPA 3G10WVE wireless routers versions prior to firmware 3G10WVE-L101-S306ETS-C01 R05 Description The issue is related to the ping.cgi script in the router's firmware, which lacks proper input sanitization. This allows a remote...

NetCommWireless HSPA 3G10WVE Authentication Bypass / Code Execution

Title: ==== NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-6023, CVE-2016-6024 Date: ==== 03-05-2016 dd/mm/yyyy Vendor: ====== NetComm Wireless is a leading develop...