Detections
Analytics

CVE-2019-3915

high

Description

Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface.

References

https://www.tenable.com/security/research/tra-2019-17

Details

Published: 2019-04-11

Risk Information

CVSS v2

Base Score: 5.4

Vector: CVSS2#AV:A/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: High