CVE-2015-6023

Name of the Vulnerable Software and Affected Versions NetCommWireless HSPA 3G10WVE wireless routers versions prior to 3G10WVE-L101-S306ETS-C01 R05

Description The issue allows remote attackers to bypass intended access restrictions via a direct request to the ping.cgi endpoint. This can potentially be combined with other issues to execute arbitrary commands.

Recommendations For versions prior to 3G10WVE-L101-S306ETS-C01 R05, update the firmware to version 3G10WVE-L101-S306ETS-C01 R05 or later to resolve the issue. As a temporary workaround, consider restricting access to the ping.cgi endpoint until a patch is available.