CVE-2015-6319
9.8
CRITICAL · CVSS 3.0 · EPSS 2.7% (pctl 86)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.69% — more likely to be exploited than 86% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2016-01-27 |
| Last modified | 2026-06-17 |
Affected (23)
| Vendor | Product |
|---|---|
| cisco | rv series router firmware |
| cisco | rv016 multi-wan vpn router |
| cisco | rv042 dual wan vpn router |
| cisco | rv042g dual gigabit wan vpn router |
| cisco | rv082 dual wan vpn router |
| cisco | rv110w wireless-n vpn firewall |
| cisco | rv120w wireless-n vpn firewall |
| cisco | rv130 vpn router |
| cisco | rv130w wireless-n multifunction vpn router |
| cisco | rv180 vpn router |
| cisco | rv180w wireless-n multifunction vpn router |
| cisco | rv215w wireless-n vpn router |
| cisco | rv220w wireless network security firewall |
| cisco | rv320 dual gigabit wan vpn router |
| cisco | rv320 dual gigabit wan wf vpn router |
| cisco | rv325 dual gigabit wan wf vpn router |
| cisco | rv325 dual wan gigabit vpn router |
| cisco | rvl200 4-port ssl ipsec vpn router |
| cisco | rvs4000 4-port gigabit security router - vpn |
| cisco | wrv200 wireless-g vpn router - rangebooster |
| cisco | wrv210 wireless-g vpn router - rangebooster |
| cisco | wrvs4400n wireless-n gigabit security router - vpn v2.0 |
| sun | opensolaris |
References
→ the Explorer · watch your stack · NVD