SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCisco Rv016 Multi Wan Vpn Router
HWCiscoall versionsCisco Rv042 Dual Wan Vpn Router
HWCiscoall versionsCisco Rv042g Dual Gigabit Wan Vpn Router
HWCiscoall versionsCisco Rv082 Dual Wan Vpn Router
HWCiscoall versionsCisco Rv110w Wireless N Vpn Firewall
HWCiscoall versionsCisco Rv120w Wireless N Vpn Firewall
HWCiscoall versionsCisco Rv130 Vpn Router
HWCiscoall versionsCisco Rv130w Wireless N Multifunction Vpn Router
HWCiscoall versionsCisco Rv180 Vpn Router
HWCiscoall versionsCisco Rv180w Wireless N Multifunction Vpn Router
HWCiscoall versionsCisco Rv215w Wireless N Vpn Router
HWCiscoall versionsCisco Rv220w Wireless Network Security Firewall
HWCiscoall versionsCisco Rv320 Dual Gigabit Wan Vpn Router
HWCiscoall versionsCisco Rv320 Dual Gigabit Wan Wf Vpn Router
HWCiscoall versionsCisco Rv325 Dual Gigabit Wan Wf Vpn Router
HWCiscoall versionsCisco Rv325 Dual Wan Gigabit Vpn Router
HWCiscoall versionsCisco Rvl200 4 Port Ssl Ipsec Vpn Router
HWCiscoall versionsCisco Rvs4000 4 Port Gigabit Security Router Vpn
HWCiscoall versionsCisco Rv Series Router Firmware
OSCisco1.0.0.21.0.0.301.0.1.91.0.2.61.0.3.101.0.4.101.0.4.141.0.5.61.0.5.81.0.6.61.1.0.91.2.0.2Cisco Wrv200 Wireless G Vpn Router Rangebooster
HWCiscoall versionsCisco Wrv210 Wireless G Vpn Router Rangebooster
HWCiscoall versionsCisco Wrvs4400n Wireless N Gigabit Security Router Vpn V2.0
HWCiscoall versionsSun Opensolaris
OSSunsnv_124
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
SQLi
CWE
Related vulnerabilities
CVE-2021-34730CRITICAL9.8PL ✓same product
RCE i DoS przez UPnP w routerach Cisco Small Business RV110W/RV130/RV215W
CVE-2020-3331CRITICAL9.8PL ✓same product
RCE w interfejsie zarządzania Cisco RV110W i RV215W — wykonanie kodu jako root
CVE-2020-3330CRITICAL9.8PL ✓same product
Cisco RV110W — statyczne hasło konta systemowego w usłudze Telnet
CVE-2020-3323CRITICAL9.8PL ✓same product
RCE w interfejsie zarządzania routerów Cisco Small Business RV110W/RV130/RV215W
CVE-2018-0426CRITICAL9.8PL ✓same product
Path Traversal w interfejsie zarządzania routerów Cisco RV110W/RV130W/RV215W