high8.8
CVE-2019-19494
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel…
Impact
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21_T4, Sagemcom F@st 3890 prior to 05.76.6.3f, Sagemcom F@st 3686 3.428.0, Sagemcom F@st 3686 4.83.0, NETGEAR CG3700EMR 2.01.05, NETGEAR CG3700EMR 2.01.03, NETGEAR C6250EMR 2.01.05, NETGEAR C6250EMR 2.01.03, Technicolor TC7230 STEB 01.25, COMPAL 7284E 5.510.5.11, and COMPAL 7486E 5.510.5.11.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sagemcom | F\@St 3890 Firmware | before 50.10.21_t4 before 05.76.6.3f |
| Sagemcom | F\@St 3686 Firmware | Versions 3.428.0, 4.83.0 |
| Netgear | Cg3700emr Firmware | Versions 2.01.03, 2.01.05 |
| Netgear | C6250emr Firmware | Versions 2.01.03, 2.01.05 |
| Technicolor | Tc7230 Steb Firmware | Version 01.25 |
| Compal | 7284e Firmware | Version 5.510.5.11 |
| Compal | 7486e Firmware | Version 5.510.5.11 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cablehaunt.com
- https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdf
- https://github.com/Lyrebirds/Fast8690-exploit
- https://www.broadcom.com
- https://cablehaunt.com
- https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdf
- https://github.com/Lyrebirds/Fast8690-exploit
- https://www.broadcom.com