Unscored CVE-2015-6319 EUVD-2015-6261GHSA-gvrr-f66h-397r

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL …

Published Jan 27, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.

References

1034830 vdb-entry
20160127 Cisco RV220W Management Authentication Bypass Vulnerability vendor-advisory