If your PLC firmware is r47 and above you can use the "RA" hostlink command to read the ADC data of the slave PLC directly. However, for earlier PLC versions "RA" command is not supported, so you need to execute the ADC(n) command in the slave PLC to read the ADC port, e,g:
DM[1] = ADC(1)
The above command will activate the ADC channel 1 which allows it to show up on internal variable for ADC #1. After that you can read the ADC value from either the DM[1] variable in the slave using "RVD" command, or you can use "RVS0B01" command to read from ADC channel 1.
NETCMD$ returns a string that includes the header and FCS, and so you have to extract out the data portion using the MID$( ) command. MID$( ) will return an ASCII string which you can convert into integer using either the VAL( ) command or HEXVAL( ) command, depending on whether the string is a decimal or hexadecimal representation of the actual value.
Another possibility is to use the READMODBUS command to read from the DM area of the slave (starting from offset address of 1000). It is straightforward and does not require you to extract string data or convert string to integer as READMOBDUS return a 16-bit integer directly.