CVE-2019-3915
Last modified
CVE-2019-3915 is a vulnerability of currently unknown severity. Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface.. EPSS estimates a 0.64% chance of exploitation in the next 30 days.
Description
Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Verizon | Fios Quantum Gateway G1100 Firmware | 02.01.00.05 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-3915?
How severe is CVE-2019-3915?
How do I fix CVE-2019-3915?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-3909Premisys Identicard version 3.1.190 database uses default cr…
- CVE-2019-3910Crestron AM-100 before firmware version 1.6.0.2 contains an …
- CVE-2019-3911Reflected cross-site scripting (XSS) vulnerability in LabKey…6.1
- CVE-2019-3912An open redirect vulnerability in LabKey Server Community Ed…6.1
- CVE-2019-3913Command manipulation in LabKey Server Community Edition befo…4.9
- CVE-2019-3914Remote command injection vulnerability in Verizon Fios Quant…
- CVE-2019-3916Information disclosure vulnerability in Verizon Fios Quantum…
- CVE-2019-3917The Alcatel Lucent I-240W-Q GPON ONT using firmware version …7.5
- CVE-2019-3918The Alcatel Lucent I-240W-Q GPON ONT using firmware version …9.8
- CVE-2019-3919The Alcatel Lucent I-240W-Q GPON ONT using firmware version …8.8
- CVE-2019-3920The Alcatel Lucent I-240W-Q GPON ONT using firmware version …8.8
- CVE-2019-3921The Alcatel Lucent I-240W-Q GPON ONT using firmware version …8.8
Are you affected by CVE-2019-3915?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST