Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2019-19494: Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote

60
This week
HIGH 8.8UPGRADEMITIGATEMITIGATE

CVE-2019-19494 is a high-severity flaw (CVSS 8.8) affecting f\@st 3890 firmware, f\@st 3686 firmware, cg3700emr firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21_T4, Sagemcom F@st 3890 prior to 05.76.6.3f, Sagemcom F@st 3686 3.428.0, Sagemcom F@st 3686 4.83.0, NETGEAR CG3700EMR 2.01.05, NETGEAR CG3700EMR 2.01.03, NETGEAR C6250E

Why this priority

  • High severity
  • EPSS top 2%: very likely to be exploited
  • Public exploit reference

A fixed release or distro patch exists.

Risk facts

CVSS score8.8 (High)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionRequired
EPSS exploit chance23.1% (top 2%)
CISA exploited listNo
WeaknessCWE-120
Published2020-01-09
Last modified2026-06-17
Publisher (CNA): MITRE · Vendor: compal · netgear · sagemcom · technicolor

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

sagemcom f\@st 3890 firmware UPGRADE
Affected: < 50.10.21_t4 · < 05.76.6.3f
Fixed in: 05.76.6.3f, 50.10.21_t4
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
sagemcom f\@st 3686 firmware MITIGATE
Affected: 3.428.0 · 4.83.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 3.428.0
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
netgear cg3700emr firmware MITIGATE
Affected: 2.01.03 · 2.01.05
Fixed in: no fixed release known
Safe to downgrade to: a release before 2.01.03
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
netgear c6250emr firmware MITIGATE
Affected: 2.01.03 · 2.01.05
Fixed in: no fixed release known
Safe to downgrade to: a release before 2.01.03
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
technicolor tc7230 steb firmware MITIGATE
Affected: 01.25
Fixed in: no fixed release known
Safe to downgrade to: a release before 01.25
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
compal 7284e firmware MITIGATE
Affected: 5.510.5.11
Fixed in: no fixed release known
Safe to downgrade to: a release before 5.510.5.11
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2019-19494?

f\@st 3890 firmware: upgrade to 05.76.6.3f, 50.10.21_t4; f\@st 3686 firmware: mitigate or apply the listed mitigation; cg3700emr firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2019-19494 being exploited?

CVE-2019-19494 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2019-19494 affect?

CVE-2019-19494 affects f\@st 3890 firmware, f\@st 3686 firmware, cg3700emr firmware. Severity is high (CVSS 8.8). Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products in

How urgent is CVE-2019-19494?

Priority 60/100. High severity; EPSS top 2%: very likely to be exploited; Public exploit reference

Software pages

Netgear vulnerabilities

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.