CVE-2015-6319 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2015-6319

Deferred

More Info Official Page

Source-psirt@cisco.com

Published At-27 Jan, 2016 | 22:59

Updated At-12 Apr, 2025 | 10:46

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Cisco Systems, Inc.

>>rv016_multi-wan_vpn_router>>*

cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv042_dual_wan_vpn_router>>*

cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv042g_dual_gigabit_wan_vpn_router>>*

cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv082_dual_wan_vpn_router>>*

cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv110w_wireless-n_vpn_firewall>>*

cpe:2.3:h:cisco:rv110w_wireless-n_vpn_firewall:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv120w_wireless-n_vpn_firewall>>*

cpe:2.3:h:cisco:rv120w_wireless-n_vpn_firewall:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv130_vpn_router>>*

cpe:2.3:h:cisco:rv130_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv130w_wireless-n_multifunction_vpn_router>>*

cpe:2.3:h:cisco:rv130w_wireless-n_multifunction_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv180_vpn_router>>*

cpe:2.3:h:cisco:rv180_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv180w_wireless-n_multifunction_vpn_router>>*

cpe:2.3:h:cisco:rv180w_wireless-n_multifunction_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv215w_wireless-n_vpn_router>>*

cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv220w_wireless_network_security_firewall>>*

cpe:2.3:h:cisco:rv220w_wireless_network_security_firewall:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv320_dual_gigabit_wan_vpn_router>>*

cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv320_dual_gigabit_wan_wf_vpn_router>>*

cpe:2.3:h:cisco:rv320_dual_gigabit_wan_wf_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv325_dual_gigabit_wan_wf_vpn_router>>*

cpe:2.3:h:cisco:rv325_dual_gigabit_wan_wf_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv325_dual_wan_gigabit_vpn_router>>*

cpe:2.3:h:cisco:rv325_dual_wan_gigabit_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rvl200_4-port_ssl_ipsec_vpn_router>>*

cpe:2.3:h:cisco:rvl200_4-port_ssl_ipsec_vpn_router:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rvs4000_4-port_gigabit_security_router_-_vpn>>*

cpe:2.3:h:cisco:rvs4000_4-port_gigabit_security_router_-_vpn:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>wrv200_wireless-g_vpn_router_-_rangebooster>>*

cpe:2.3:h:cisco:wrv200_wireless-g_vpn_router_-_rangebooster:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>wrv210_wireless-g_vpn_router_-_rangebooster>>*

cpe:2.3:h:cisco:wrv210_wireless-g_vpn_router_-_rangebooster:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>wrvs4400n_wireless-n_gigabit_security_router_-_vpn_v2.0>>*

cpe:2.3:h:cisco:wrvs4400n_wireless-n_gigabit_security_router_-_vpn_v2.0:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.0.2

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.0.2:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.0.30

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.0.30:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.1.9

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.1.9:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.2.6

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.2.6:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.3.10

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.3.10:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.4.10

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.4.10:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.4.14

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.4.14:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.5.6

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.5.6:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.5.8

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.5.8:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.0.6.6

cpe:2.3:o:cisco:rv_series_router_firmware:1.0.6.6:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.1.0.9

cpe:2.3:o:cisco:rv_series_router_firmware:1.1.0.9:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>rv_series_router_firmware>>1.2.0.2

cpe:2.3:o:cisco:rv_series_router_firmware:1.2.0.2:*:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>opensolaris>>snv_124

cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-rv220	psirt@cisco.com	Vendor Advisory
http://www.securitytracker.com/id/1034830	psirt@cisco.com	N/A
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-rv220	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securitytracker.com/id/1034830	af854a3a-2127-422b-91ae-364da2661108	N/A