CVE-2015-6319: SQL Injection
Published Jan 27, 2016
·Updated
SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.
Affected Software
34 affected components
Cisco Rv016 Multi-wan Vpn Router
Cisco Rv042 Dual Wan Vpn Router
Cisco Rv042g Dual Gigabit Wan Vpn Router
Cisco Rv082 Dual Wan Vpn Router
Cisco RV110W Wireless-N VPN Firewall
Cisco Rv120w Wireless-n Vpn Firewall
Cisco RV130 VPN Router
Cisco RV130W Wireless-N Multifunction VPN Router
Cisco Rv180 Vpn Router
Cisco RV180W Wireless-N Multifunction VPN Router
Cisco RV215W Wireless-N VPN Router
Cisco RV220W Wireless Network Security Firewall
Cisco Rv320 Dual Gigabit Wan Vpn Router
Cisco Rv320 Dual Gigabit Wan Wf Vpn Router
Cisco Rv325 Dual Gigabit Wan Wf Vpn Router
Cisco Rv325 Dual Wan Gigabit Vpn Router
Cisco Rvl200 4-port Ssl Ipsec Vpn Router
Cisco Rvs4000 4-port Gigabit Security Router - Vpn
Cisco Wrv200 Wireless-g Vpn Router - Rangebooster
Cisco Wrv210 Wireless-g Vpn Router - Rangebooster
Cisco Wrvs4400n Wireless-n Gigabit Security Router - Vpn V2.0
Cisco Rv Series Router Firmware=1.0.0.2
Cisco Rv Series Router Firmware=1.0.0.30
Cisco Rv Series Router Firmware=1.0.1.9
Cisco Rv Series Router Firmware=1.0.2.6
Cisco Rv Series Router Firmware=1.0.3.10
Cisco Rv Series Router Firmware=1.0.4.10
Cisco Rv Series Router Firmware=1.0.4.14
Cisco Rv Series Router Firmware=1.0.5.6
Cisco Rv Series Router Firmware=1.0.5.8
Cisco Rv Series Router Firmware=1.0.6.6
Cisco Rv Series Router Firmware=1.1.0.9
Cisco Rv Series Router Firmware=1.2.0.2
Sun OpenSolaris=snv_124
Event History
Jan 27, 2016
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6319?
CVE-2015-6319 is classified as a medium severity SQL injection vulnerability.
2
How do I fix CVE-2015-6319?
To fix CVE-2015-6319, update the affected Cisco RV220W Wireless Network Security Firewall to the latest firmware version available.
3
Which devices are affected by CVE-2015-6319?
CVE-2015-6319 specifically affects the Cisco RV220W Wireless Network Security Firewall.
4
Can CVE-2015-6319 be exploited remotely?
Yes, CVE-2015-6319 can be exploited remotely by attackers through crafted HTTP headers.
5
What type of vulnerability is CVE-2015-6319?
CVE-2015-6319 is an SQL injection vulnerability that allows execution of arbitrary SQL commands.