Vulnerability Description
Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Verizon | Fios Quantum Gateway G1100 Firmware | 02.01.00.05 |
| Verizon | Fios Quantum Gateway G1100 | - |
Related Weaknesses (CWE)
References
- https://www.tenable.com/security/research/tra-2019-17ExploitThird Party Advisory
- https://www.tenable.com/security/research/tra-2019-17ExploitThird Party Advisory
FAQ
What is CVE-2019-3914?
CVE-2019-3914 is a vulnerability with a CVSS score of 7.2 (HIGH). Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device b...
How severe is CVE-2019-3914?
CVE-2019-3914 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-3914?
Check the references section above for vendor advisories and patch information. Affected products include: Verizon Fios Quantum Gateway G1100 Firmware, Verizon Fios Quantum Gateway G1100.