Integer Overflow Vulnerability in LDAP Server of Huawei Products
CVE-2019-19414

7.5HIGH

Key Information:

Vendor
Huawei
Status
Cloudengine 12800;cloudengine 5800;cloudengine 6800;cloudengine 7800;dbs3900 Tdd Lte;dp300;rp200;te30;te40;te50;te60
Vendor
CVE Published:
21 January 2020

Summary

An integer overflow vulnerability exists within the LDAP server of certain Huawei products due to inadequate input validation. This flaw allows remote attackers to exploit the system by sending specifically crafted packets. In a successful attack, the affected system may experience a crash, leading to service disruptions and potential loss of data integrity.

Affected Version(s)

CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 V100R003C10,V100R005C00,V100R006C00,V200R001C00,V200R002C50

CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 V100R005C00,V100R005C10,V100R006C00,V200R001C00,V200R002C50SPC800

CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 V100R005C00,V100R005C10,V100R006C00,V200R001C00,V200R002C50

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.