vulnerability

Cisco Cisco Small Business RV Router: CVE-2015-6319: Cisco RV220W Management Authentication Bypass Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Jan 27, 2016

Added

Apr 9, 2025

Modified

Mar 30, 2026

Description

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.

Solution

cisco-small-business-rv-router-app-upgrade-latest

References

CVE-2015-6319
https://attackerkb.com/topics/CVE-2015-6319
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-rv220
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-6261
CISCO-cisco-sa-20160127-rv220
CWE-89
EUVD-EUVD-2015-6261

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report