Vulnerabilities > Compal > High

DATE CVE VULNERABILITY TITLE RISK
2020-01-09 CVE-2019-19494 Classic Buffer Overflow vulnerability in multiple products
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser.
network
low complexity
sagemcom netgear technicolor compal CWE-120
8.8
2019-10-11 CVE-2019-17499 OS Command Injection vulnerability in Compal Ch7465Lg Firmware 6.12.18.252P4
The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the Target_IP parameter.
network
low complexity
compal CWE-78
8.8