CVE-2019-3914 - Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname

Back Back to CVE browser

HIGH

Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname

Published Apr 11, 2019

7.2

HIGH

CVSS 3.0

EPSS 29.89%

Description

Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname.

Affected products

Vendor Verizon Product Fios Quantum Gateway (G1100) Default
n/a
- Version
  Firmware version 02.01.00.05
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Verizon

Fios Quantum Gateway (G1100)

n/a

Version	Status	Constraints
Firmware version 02.01.00.05	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13521
Advisory
https://www.tenable.com/security/research/tra-2019-17
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13521		Advisory
https://www.tenable.com/security/research/tra-2019-17		x_refsource_MISCExploitThird Party Advisory