CVE-2015-6319
CriticalSummary
CVE-2015-6319 is a vulnerability in the web-based management interface on Cisco RV220W devices that allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information or system compromise.
Recommendation
It is recommended to update the Cisco RV220W devices to the latest firmware version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.

