CVE Feed

    Dashboard / CVE / CVE-2015-6319

    CVE-2015-6319

    SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.

    Published:Jan 27, 2016
    Last Modified:Apr 12, 2025
    EPS:Jan 27, 2016
    EPSS Score:0.00807
    CVSS Score:9.8

    Affected Products

    Vendor
    Cisco
    Product
    Rv016 Multi-wan Vpn Router
    Vendor
    Cisco
    Product
    Rv042 Dual Wan Vpn Router
    Vendor
    Cisco
    Product
    Rv042g Dual Gigabit Wan Vpn Router
    Vendor
    Cisco
    Product
    Rv082 Dual Wan Vpn Router
    Vendor
    Cisco
    Product
    Rv110w Wireless-n Vpn Firewall
    Vendor
    Cisco
    Product
    Rv120w Wireless-n Vpn Firewall
    Vendor
    Cisco
    Product
    Rv130 Vpn Router
    Vendor
    Cisco
    Product
    Rv130w Wireless-n Multifunction Vpn Router
    Vendor
    Cisco
    Product
    Rv180 Vpn Router
    Vendor
    Cisco
    Product
    Rv180w Wireless-n Multifunction Vpn Router
    Vendor
    Cisco
    Product
    Rv215w Wireless-n Vpn Router
    Vendor
    Cisco
    Product
    Rv220w Wireless Network Security Firewall
    Vendor
    Cisco
    Product
    Rv320 Dual Gigabit Wan Vpn Router
    Vendor
    Cisco
    Product
    Rv320 Dual Gigabit Wan Wf Vpn Router
    Vendor
    Cisco
    Product
    Rv325 Dual Gigabit Wan Wf Vpn Router
    Vendor
    Cisco
    Product
    Rv325 Dual Wan Gigabit Vpn Router
    Vendor
    Cisco
    Product
    Rv Series Router Firmware
    Vendor
    Cisco
    Product
    Rvl200 4-port Ssl Ipsec Vpn Router
    Vendor
    Cisco
    Product
    Rvs4000 4-port Gigabit Security Router - Vpn
    Vendor
    Cisco
    Product
    Wrv200 Wireless-g Vpn Router - Rangebooster
    Vendor
    Cisco
    Product
    Wrv210 Wireless-g Vpn Router - Rangebooster
    Vendor
    Cisco
    Product
    Wrvs4400n Wireless-n Gigabit Security Router - Vpn V2.0
    Vendor
    Sun
    Product
    Opensolaris

    Exploits

    No exploit reference

    Related CVEs

    CVE-2021-1314 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…
    CVE-2021-1315 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…
    CVE-2021-1316 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…
    CVE-2021-1317 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…
    CVE-2021-1318 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…
    CVE-2021-1319 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…
    CVE-2021-1320 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…
    CVE-2021-1321 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…
    CVE-2021-1322 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…
    CVE-2021-1323 (CVSS 7.2) — Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, R…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High