What’s Vulnerable › Vulnerabilities

CVE-2015-6319

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-01-27 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.

Affected products

• Cisco Rv Series Router Firmware: 1.0.0.2, 1.0.0.30, 1.0.1.9, 1.0.2.6, 1.0.3.10, 1.0.4.10 (+6)
• Sun Opensolaris: snv_124

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-rv220
• http://www.securitytracker.com/id/1034830
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-rv220
• http://www.securitytracker.com/id/1034830

Get alerted when CVE-2015-6319 or the next vulnerability affects your stack