CVE-2019-19413

7.5HIGH

Key Information:

Vendor
Huawei
Status
Cloudengine 12800;cloudengine 5800;cloudengine 6800;cloudengine 7800;dbs3900 Tdd Lte;dp300;rp200;te30;te40;te50;te60
Vendor
CVE Published:
21 January 2020

Summary

There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.

Affected Version(s)

CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 V100R003C10,V100R005C00,V100R006C00,V200R001C00,V200R002C50

CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 V100R005C00,V100R005C10,V100R006C00,V200R001C00,V200R002C50SPC800

CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 V100R005C00,V100R005C10,V100R006C00,V200R001C00,V200R002C50

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.