CVE-2019-194947284e Firmware Buffer Overflow
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser.
Published Jan 9, 2020 · Updated Nov 21, 2024
Key Facts
Patch in the next maintenance window- CVE-2019-19494 is a high-severity vulnerability (CVSS 8.8 v3.1) affecting 7284e Firmware (Compal), 7486e Firmware (Compal), C6250emr Firmware (Netgear) and 4 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 23% probability of exploitation in the next 30 days.
- Fixed versions are available, including F\@st 3890 Firmware 50.10.21_t4.
- Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Scores
CVSS v3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
23%
Higher than 97.7% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
34/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
1
Reports of active use
Advisories And Exploit References
Description
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser.
Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21_T4, Sagemcom F@st 3890 prior to 05.76.6.3f, Sagemcom F@st 3686 3.428.0, Sagemcom F@st 3686 4.83.0, NETGEAR CG3700EMR 2.01.05, NETGEAR CG3700EMR 2.01.03, NETGEAR C6250EMR 2.01.05, NETGEAR C6250EMR 2.01.03, Technicolor TC7230 STEB 01.25, COMPAL 7284E 5.510.5.11, and COMPAL 7486E 5.510.5.11.
Affected Products
10 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| 7284e FirmwareCompal | 5.510.5.11 | n/a |
| 7486e FirmwareCompal | 5.510.5.11 | n/a |
| C6250emr FirmwareNetgear | 2.01.03, 2.01.05 | n/a |
| Cg3700emr FirmwareNetgear | 2.01.03, 2.01.05 | n/a |
| F\@st 3686 FirmwareSagemcom | 3.428.0, 4.83.0 | n/a |
Patched Releases
F\@st 3890 Firmware
50.10.21_t4
Timeline
Publicly disclosed
Jan 9, 2020
Last updated
Nov 21, 2024
Weakness Type
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
References
- advisorygithub.com · report.pdf
- exploitcablehaunt.com
- exploitgithub.com · Fast8690-exploit
- otherbroadcom.com
FAQ
Common Questions.
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser.
Affected: 7284e Firmware (Compal) versions 5.510.5.11; 7486e Firmware (Compal) versions 5.510.5.11; C6250emr Firmware (Netgear) versions 2.01.03, 2.01.05, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including F\@st 3890 Firmware 50.10.21_t4.
Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Is CVE-2019-19494 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo