← Back

CVE-2019-19414

nvd nist
Published: Jan 21, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.

Affected (12)

Huawei
7 products
Dbs3900 Tdd Lte Firmware
Dp300 Firmware
Rp200 Firmware
Te30 Firmware
Te40 Firmware
Te50 Firmware
Te60 Firmware
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Dbs3900 Tdd Lte Firmware
Version v100r003c00
Dbs3900 Tdd Lte Firmware
Version v100r004c10
Running on/withPlatform Versions
Huawei
Dbs3900 Tdd Lte
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dp300 Firmware
Version v500r002c00
Running on/withPlatform Versions
Huawei
Dp300
All versions
Configuration C
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Rp200 Firmware
Version v500r002c00spc200
Rp200 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Rp200
All versions
Configuration D
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Te30 Firmware
Version v100r001c10
Te30 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Te30
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Te40 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Te40
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Te50 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Te50
All versions
Configuration G
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Te60 Firmware
Version v100r001c10
Te60 Firmware
Version v500r002c00
Te60 Firmware
Version v600r006c00
Running on/withPlatform Versions
Huawei
Te60
All versions

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.