CVE-2015-6024: Netcommwireless Hspa 3g10wve Firmware

Critical severity, CVSS 9.8. EPSS: 26.1% chance of exploitation in the next 30 days.

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter.

Affected products

• Netcommwireless Hspa 3g10wve Firmware: version 3g10wve-l101-s306ets-c01_r03 only

Published 2017-02-09. Last modified 2026-06-17.