1. Home
  2. CVE Database
  3. CVE-2015-6319
CRITICAL · 9.8

CVE-2015-6319

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID ...

Vulnerability Description

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoRv016 Multi-Wan Vpn RouterAll versions
CiscoRv042 Dual Wan Vpn RouterAll versions
CiscoRv042G Dual Gigabit Wan Vpn RouterAll versions
CiscoRv082 Dual Wan Vpn RouterAll versions
CiscoRv110W Wireless-N Vpn FirewallAll versions
CiscoRv120W Wireless-N Vpn FirewallAll versions
CiscoRv130 Vpn RouterAll versions
CiscoRv130W Wireless-N Multifunction Vpn RouterAll versions
CiscoRv180 Vpn RouterAll versions
CiscoRv180W Wireless-N Multifunction Vpn RouterAll versions
CiscoRv215W Wireless-N Vpn RouterAll versions
CiscoRv220W Wireless Network Security FirewallAll versions
CiscoRv320 Dual Gigabit Wan Vpn RouterAll versions
CiscoRv320 Dual Gigabit Wan Wf Vpn RouterAll versions
CiscoRv325 Dual Gigabit Wan Wf Vpn RouterAll versions
CiscoRv325 Dual Wan Gigabit Vpn RouterAll versions
CiscoRvl200 4-Port Ssl Ipsec Vpn RouterAll versions
CiscoRvs4000 4-Port Gigabit Security Router - VpnAll versions
CiscoWrv200 Wireless-G Vpn Router - RangeboosterAll versions
CiscoWrv210 Wireless-G Vpn Router - RangeboosterAll versions

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2015-6319?

CVE-2015-6319 is a vulnerability with a CVSS score of 9.8 (CRITICAL). SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID ...

How severe is CVE-2015-6319?

CVE-2015-6319 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2015-6319?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Rv016 Multi-Wan Vpn Router, Cisco Rv042 Dual Wan Vpn Router, Cisco Rv042G Dual Gigabit Wan Vpn Router, Cisco Rv082 Dual Wan Vpn Router, Cisco Rv110W Wireless-N Vpn Firewall.