CVE-2019-3914

HIGH EXPLOITED

Verizon Fios Quantum Gateway G1100 Firmware 02.01.00.05 - Authenticated OS Command Injection via Network Object Hostname

Title source: llm

Exploitation Summary

CVE-2019-3914 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://www.tenable.com/security/research/tra-2019-17

Scores

CVSS v3 7.2

EPSS 0.2989

EPSS Percentile 98.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2024-08-28

CWE

CWE-78

Status published

Products (1)

verizon/fios_quantum_gateway_g1100_firmware 02.01.00.05

Published Apr 11, 2019

Tracked Since Feb 18, 2026