NetSight
high7.5

CVE-2019-19413

There is an integer overflow vulnerability in LDAP client of some Huawei products.

Impact

There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.

Affected products

VendorProductAffected versions
HuaweiDbs3900 Tdd Lte Firmware
Versions v100r003c00, v100r004c10
HuaweiDp300 Firmware
Version v500r002c00
HuaweiRp200 Firmware
Versions v500r002c00spc200, v600r006c00
HuaweiTe30 Firmware
Versions v100r001c10, v600r006c00
HuaweiTe40 Firmware
Version v600r006c00
HuaweiTe50 Firmware
Version v600r006c00
HuaweiTe60 Firmware
Versions v100r001c10, v500r002c00, v600r006c00

Weakness classification

References