CVE-2019-3916

2019-04-1114:12:44

tenable

www.cve.org

7.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

JSON

Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).

CNA Affected

[
  {
    "product": "Fios Quantum Gateway (G1100)",
    "vendor": "Verizon",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware version 02.01.00.05"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2019-17