CVE-2019-19494: Compal 7284e Firmware

High severity, CVSS 8.8. EPSS: 23.1% chance of exploitation in the next 30 days.

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21_T4, Sagemcom F@st 3890 prior to 05.76.6.3f, Sagemcom F@st 3686 3.428.0, Sagemcom F@st 3686 4.83.0, NETGEAR CG3700EMR 2.01.05, NETGEAR CG3700EMR 2.01.03, NETGEAR C6250EMR 2.01.05, NETGEAR C6250EMR 2.01.03, Technicolor TC7230 STEB 01.25, COMPAL 7284E 5.510.5.11, and COMPAL 7486E 5.510.5.11.

Affected products

• Compal 7284e Firmware: version 5.510.5.11 only
• Compal 7486e Firmware: version 5.510.5.11 only
• NETGEAR c6250emr Firmware: version 2.01.03 only; version 2.01.05 only
• NETGEAR CG3700EMR Firmware: version 2.01.03 only; version 2.01.05 only
• Sagemcom F@st 3686 Firmware: version 3.428.0 only; version 4.83.0 only
• Sagemcom F@st 3890 Firmware: before 50.10.21_t4 (fixed in 50.10.21_t4); before 05.76.6.3f (fixed in 05.76.6.3f)
• Technicolor TC7230 Steb Firmware: version 01.25 only

Published 2020-01-09. Last modified 2026-06-17.