Vulnerability Description
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21_T4, Sagemcom F@st 3890 prior to 05.76.6.3f, Sagemcom F@st 3686 3.428.0, Sagemcom F@st 3686 4.83.0, NETGEAR CG3700EMR 2.01.05, NETGEAR CG3700EMR 2.01.03, NETGEAR C6250EMR 2.01.05, NETGEAR C6250EMR 2.01.03, Technicolor TC7230 STEB 01.25, COMPAL 7284E 5.510.5.11, and COMPAL 7486E 5.510.5.11.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sagemcom | F\@St 3890 Firmware | < 50.10.21_t4 |
| Sagemcom | F\@St 3890 | - |
| Sagemcom | F\@St 3686 Firmware | 3.428.0 |
| Sagemcom | F\@St 3686 | - |
| Netgear | Cg3700Emr Firmware | 2.01.03 |
| Netgear | Cg3700Emr | - |
| Netgear | C6250Emr Firmware | 2.01.03 |
| Netgear | C6250Emr | - |
| Technicolor | Tc7230 Steb Firmware | 01.25 |
| Technicolor | Tc7230 Steb | - |
| Compal | 7284E Firmware | 5.510.5.11 |
| Compal | 7284E | - |
| Compal | 7486E Firmware | 5.510.5.11 |
| Compal | 7486E | - |
Related Weaknesses (CWE)
References
- https://cablehaunt.comExploitTechnical DescriptionThird Party Advisory
- https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdfTechnical DescriptionThird Party Advisory
- https://github.com/Lyrebirds/Fast8690-exploitExploitThird Party Advisory
- https://www.broadcom.comProduct
- https://cablehaunt.comExploitTechnical DescriptionThird Party Advisory
- https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdfTechnical DescriptionThird Party Advisory
- https://github.com/Lyrebirds/Fast8690-exploitExploitThird Party Advisory
- https://www.broadcom.comProduct
FAQ
What is CVE-2019-19494?
CVE-2019-19494 is a vulnerability with a CVSS score of 8.8 (HIGH). Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's b...
How severe is CVE-2019-19494?
CVE-2019-19494 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-19494?
Check the references section above for vendor advisories and patch information. Affected products include: Sagemcom F\@St 3890 Firmware, Sagemcom F\@St 3890, Sagemcom F\@St 3686 Firmware, Sagemcom F\@St 3686, Netgear Cg3700Emr Firmware.