CVE Catalog

CVE-2015-6319

Critical
Published: Translated: NVD NIST

Summary

CVE-2015-6319 is a vulnerability in the web-based management interface on Cisco RV220W devices that allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information or system compromise.

Recommendation

It is recommended to update the Cisco RV220W devices to the latest firmware version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS