{"id":"CVE-2019-3915","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-3915","generatedAt":"2026-10-28T05:26:21.833Z","title":"Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the…","description":"Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface.","published":"2019-04-11T14:29:00.000Z","lastModified":"2026-06-17T02:35:51.000Z","status":"Modified","sourceIdentifier":"vulnreport@tenable.com","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-294"],"affected":["verizon/fios quantum gateway g1100 firmware"],"epss":{"score":0.00642,"percentile":0.50581,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.64%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/107883","source":"vulnreport@tenable.com"},{"url":"https://www.tenable.com/security/research/tra-2019-17","tags":["Third Party Advisory"],"source":"vulnreport@tenable.com"},{"url":"http://www.securityfocus.com/bid/107883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/research/tra-2019-17","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-3915","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}