CVEvulnerability
CVE-2019-3916
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-04-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-425
Description
Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).
Affected configurations
• verizon fios quantum gateway g1100 firmware 02.01.00.05
Related
Weakness · CWE (1)
- CWE-425 Direct Request weakness
References
- https://www.tenable.com/security/research/tra-2019-17 Third Party Advisory
- https://www.tenable.com/security/research/tra-2019-17 Third Party Advisory