PT-2019-4315 · Compal+6 · Compal 7486E+9

Alexander Dalsgaard Krog + 3 · Published 2019-08-26 · Updated 2024-12-12 · CVE-2019-19494

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sagemcom F@st 3890 versions prior to 50.10.21 T4 Sagemcom F@st 3890 versions prior to 05.76.6.3f Sagemcom F@st 3686 version 3.428.0 Sagemcom F@st 3686 version 4.83.0 NETGEAR CG3700EMR version 2.01.05 NETGEAR CG3700EMR version 2.01.03 NETGEAR C6250EMR version 2.01.05 NETGEAR C6250EMR version 2.01.03 Technicolor TC7230 STEB version 01.25 COMPAL 7284E version 5.510.5.11 COMPAL 7486E version 5.510.5.11 Cisco EPC3928AD (affected versions not specified) Humax HGB10R-02 (affected versions not specified) Arris Surfboard SB8200 (affected versions not specified)

Description The issue is caused by a buffer overflow in the dynamic memory of Broadcom-based cable modems, allowing a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. This can give the attacker full control over the device. It is estimated that around 200 million devices in Europe are potentially affected. The vulnerability can be exploited by a specially crafted web page.

Recommendations For Sagemcom F@st 3890 versions prior to 50.10.21 T4, update to version 50.10.21 T4 or later. For Sagemcom F@st 3890 versions prior to 05.76.6.3f, update to version 05.76.6.3f or later. For Sagemcom F@st 3686 version 3.428.0, update to a newer version. For Sagemcom F@st 3686 version 4.83.0, update to a newer version. For NETGEAR CG3700EMR version 2.01.05, update to a newer version. For NETGEAR CG3700EMR version 2.01.03, update to version 2.01.05 or later. For NETGEAR C6250EMR version 2.01.05, update to a newer version. For NETGEAR C6250EMR version 2.01.03, update to version 2.01.05 or later. For Technicolor TC7230 STEB version 01.25, update to a newer version. For COMPAL 7284E version 5.510.5.11, update to a newer version. For COMPAL 7486E version 5.510.5.11, update to a newer version. For Cisco EPC3928AD, Humax HGB10R-02, and Arris Surfboard SB8200, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2020-00030

CVE-2019-19494

Affected Products

Arris Surfboard Sb8200

Compal 7284E

Compal 7486E

Cisco Epc3928Ad

Humax Hgb10R-02

Netgear C6250Emr

Netgear Cg3700Emr

Sagemcom F@St 3686

Sagemcom F@St 3890

Technicolor Tc7230 Steb

References · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/cable_haunt_websocket_dos.rb · Exploit
• 🔥 https://github.com/Lyrebirds/Fast8690-exploit · Exploit
• 🔥 https://cablehaunt.com · Exploit
• https://osv.dev/vulnerability/CVE-2019-19494 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00030 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-19494 · Security Note
• https://github.com/Lyrebirds/cable-haunt-vulnerability-test · Note
• https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdf · Note
• https://securitylab.ru/news/503946.php · Note
• https://opennet.ru/opennews/art.shtml?num=52169 · Note
• https://t.me/tmfeed/75367 · Telegram Post
• https://twitter.com/PSuiteNetwork/status/1867158063624450367 · Twitter Post
• https://broadcom.com · Note
• https://t.me/opennews/6230 · Telegram Post