{"uuid": "66b2e43e-c175-4f49-8431-dd1ac31f7a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-19494", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/cable_haunt_websocket_dos.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Alexander Dalsgaard Krog (Lyrebirds)\", \"Jens Hegner St\\u00e6rmose (Lyrebirds)\", \"Kasper Kohsel Terndrup (Lyrebirds)\", \"Simon Vandel Sillesen (Independent)\", \"Nicholas Starke\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"There exists a buffer overflow vulnerability in certain\\n          Cable Modem Spectrum Analyzer interfaces.  This overflow\\n          is exploitable, but since an exploit would differ between\\n          every make, model, and firmware version (which also\\n          differs from ISP to ISP), this module simply causes a\\n          Denial of Service to test if the vulnerability is present.\", \"disclosure_date\": \"2020-01-07\", \"fullname\": \"auxiliary/dos/http/cable_haunt_websocket_dos\", \"is_install_path\": true, \"mod_time\": \"2023-02-03 18:12:53 +0000\", \"name\": \"\\\"Cablehaunt\\\" Cable Modem WebSocket DoS\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/http/cable_haunt_websocket_dos.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"dos/http/cable_haunt_websocket_dos\", \"references\": [\"CVE-2019-19494\", \"EDB-47936\", \"URL-https://cablehaunt.com/\", \"URL-https://github.com/Lyrebirds/sagemcom-fast-3890-exploit\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:59.060227Z"}