Skip to content
Noroxi

Verizon records

21 published records for vendor verizon.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
9.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 22
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2022-28375
    40Plan

    Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled parameters within the crtcswitchsimprofile f

    CriticalCVSS 9.8No exploitEPSS 2%

    verizon · lvskihp outdoorunit firmwareJul 14, 2022

  • CVE-2022-28373
    40Plan

    Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize user-controlled parameters within the crtcreadpartition funct

    CriticalCVSS 9.8No exploitEPSS 2%

    verizon · lvskihp indoorunit firmwareJul 14, 2022

  • CVE-2022-28369
    39Monitor

    Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enable_ssh sub-op

    CriticalCVSS 9.8No exploitEPSS 1%

    verizon · lvskihp indoorunit firmwareJul 14, 2022

  • CVE-2019-3914
    37Monitor

    Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated a

    HighCVSS 7.2No exploitEPSS 29%

    verizon · fios quantum gateway g1100 firmwareApr 11, 2019

  • CVE-2022-28374
    36Monitor

    Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled parameters within the DMACC URLs on the Sett

    HighCVSS 8.8No exploitEPSS 2%

    verizon · lvskihp outdoorunit firmwareJul 14, 2022

  • CVE-2020-7660
    33Monitor

    serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".

    HighCVSS 8.1No exploitEPSS 3%

    verizon · serialize-javascriptJun 1, 2020

  • CVE-2022-28376
    32Monitor

    Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone (knowing the device's serial number) to access a CPE admin website,

    HighCVSS 8.1No exploitEPSS 1%

    verizon · lvskihp firmwareApr 3, 2022

  • CVE-2019-3916
    31Monitor

    Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated

    HighCVSS 7.5No exploitEPSS 2%

    verizon · fios quantum gateway g1100 firmwareApr 11, 2019

  • CVE-2022-29729
    30Monitor

    Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131 utilizes a weak default admin password generation algorithm which generates passwords

    HighCVSS 7.5No exploitEPSS 1%

    verizon · 4g lte network extender firmwareJun 2, 2022

  • CVE-2022-28377
    30Monitor

    On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a st

    HighCVSS 7.5No exploitEPSS 0%

    verizon · lvskihp indoorunit firmwareJul 14, 2022

  • CVE-2022-28372
    30Monitor

    On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints provide a me

    HighCVSS 7.5No exploitEPSS 0%

    verizon · lvskihp indoorunit firmwareJul 14, 2022

  • CVE-2019-3915
    30Monitor

    Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthe

    HighCVSS 7.5No exploitEPSS 0%

    verizon · fios quantum gateway g1100 firmwareApr 11, 2019

  • CVE-2022-28371
    30Monitor

    On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a st

    HighCVSS 7.5No exploitEPSS 0%

    verizon · lvskihp indoorunit firmwareJul 14, 2022

  • CVE-2022-28370
    30Monitor

    On Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devices, the RPC endpoint crtc_fw_upgrade provides a means of provisioning a firmwar

    HighCVSS 7.5No exploitEPSS 0%

    verizon · lvskihp outdoorunit firmwareJul 14, 2022

  • CVE-2013-0126
    28Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.

    MediumCVSS 6.8Proof of conceptEPSS 2%

    verizon · fios actiontec mi424wr-gen31 router firmwareMar 21, 2013

  • CVE-2013-4875
    24Monitor

    The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot pro

    MediumCVSS 6.2No exploitEPSS 0%

    verizon · wireless network extenderJul 18, 2013

  • CVE-2013-4876
    24Monitor

    The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate

    MediumCVSS 6.2No exploitEPSS 0%

    verizon · wireless network extenderJul 18, 2013

  • CVE-2013-4874
    24Monitor

    The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by conne

    MediumCVSS 6.2No exploitEPSS 0%

    verizon · wireless network extenderJul 18, 2013

  • CVE-2019-16769
    21Monitor

    Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    verizon · serialize-javascriptDec 5, 2019

  • CVE-2023-38301
    13Monitor

    An issue was discovered in a third-party component related to vendor.gsm.serial, shipped on devices from multiple device manufacturers.

    LowCVSS 3.4No exploitEPSS 0%

    Apr 22, 2024

  • CVE-2013-4877
    10Monitor

    The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to

    LowCVSS 2.6No exploitEPSS 0%

    verizon · wireless network extenderJul 18, 2013