CVE-2015-6811: SQL Injection
SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6811?
CVE-2015-6811 is considered a high severity vulnerability due to its potential for unauthorized access and data manipulation through SQL injection.
How do I fix CVE-2015-6811?
To fix CVE-2015-6811, upgrade your Sophos Cyberoam CR500iNG-XP firewall appliance to a version beyond CyberoamOS 10.6.2 MR-1.
What type of vulnerability is CVE-2015-6811?
CVE-2015-6811 is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
Can CVE-2015-6811 affect my firewall?
Yes, if you are using the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS versions 10.6.2 and earlier, you are at risk.
What is the attack vector for CVE-2015-6811?
The attack vector for CVE-2015-6811 is through the username parameter in the login.xml file, allowing attackers to exploit SQL injection.