Authentication Bypass Vulnerability in Verizon Fios Quantum Gateway

CVE-2019-3915

What is CVE-2019-3915?

A significant vulnerability exists in the Verizon Fios Quantum Gateway (G1100) firmware, where an authentication bypass through capture-replay attack can be executed. This flaw allows an unauthenticated attacker with local network access to intercept and replay login requests. Consequently, the attacker may gain unauthorized access to the critical administrative web interface, posing severe risks to the security and integrity of the network. Organizations using the affected firmware must take immediate action to mitigate this vulnerability.

References