{"id":"CVE-2019-3916","aliases":["EUVD-2019-13523","GHSA-p5fq-87jh-gjq8"],"status":"published","title":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02...","description":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02057,"percentile":0.81428,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-425"],"published":"2019-04-11T14:12:44Z","modified":"2026-06-17T02:35:51Z","products":[{"vendor":"verizon","product":"fios quantum gateway (g1100)"},{"vendor":"verizon","product":"fios_quantum_gateway_g1100_firmware"}],"references":[{"url":"https://www.tenable.com/security/research/tra-2019-17","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3916"},{"url":"https://github.com/advisories/GHSA-p5fq-87jh-gjq8"}],"sources":{"cve":[{"id":"CVE-2019-3916","description":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).","status":"published","published":"2019-04-11T14:12:44Z","modified":"2024-08-04T19:26:27.582Z","updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13523","description":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).","status":"published","published":"2019-04-11T14:12:44Z","modified":"2024-08-04T19:26:27Z","updated_at":"2026-11-03T03:06:54.362786Z"}],"ghsa":[{"id":"GHSA-p5fq-87jh-gjq8","title":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02...","description":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).","status":"published","published":"2022-05-13T01:22:29Z","modified":"2023-02-01T05:06:52Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-425"],"updated_at":"2026-11-02T14:50:26.062502Z"}],"nvd":[{"id":"CVE-2019-3916","description":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).","status":"published","published":"2019-04-11T15:29:00.543Z","modified":"2026-06-17T02:35:51.513Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-425"],"updated_at":"2026-11-02T14:05:11.426883Z"}]}}