Verizon Wireless Fios Quantum Gateway (G1100) Information Disclosure Vulnerability

The Verizon Wireless Fios Quantum Gateway G1100 is a wireless router from Verizon Wireless. An information disclosure vulnerability exists in the Verizon Fios Quantum Gateway G1100 using firmware version 02.01.00.05, which is caused by a configuration or other error in the operation of a network...

CVE-2019-3916

Information disclosure vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser e.g. /api...

CVE-2019-3914

Remote command injection vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname...

PT-2019-16771

Name of the Vulnerable Software and Affected Versions Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 Description The issue allows a remote, unauthenticated attacker to retrieve the value of the password salt by requesting an API URL, such as "/api", in a web browser...

CVE-2019-3916: Direct Request

Information disclosure vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser e.g. /api...

CVE-2019-3915: Authentication Bypass by Capture-replay

Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface...

CVE-2019-3914: Improper Neutralization of Special Elements used in an OS Command

Remote command injection vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname...

PT-2019-16770

Name of the Vulnerable Software and Affected Versions Verizon Fios Quantum Gateway G1100 version 02.01.00.05 Description The issue allows an unauthenticated attacker with adjacent network access to intercept and replay login requests, gaining access to the administrative web interface through an...

PT-2019-16769

Name of the Vulnerable Software and Affected Versions Verizon Fios Quantum Gateway G1100 version 02.01.00.05 Description A remote command injection issue allows a remote, authenticated attacker to execute arbitrary commands on the target device. This can be achieved by adding an access control ru...