CVE-2019-3916

2019-04-1114:12:44

tenable

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.004

Percentile

73.6%

JSON

Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).

CNA Affected

[
  {
    "product": "Fios Quantum Gateway (G1100)",
    "vendor": "Verizon",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware version 02.01.00.05"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2019-17