CVE-2019-19413: Huawei DBS3900 Tdd Lte Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.

Affected products

• Huawei DBS3900 Tdd Lte Firmware: version v100r003c00 only; version v100r004c10 only
• Huawei DP300 Firmware: version v500r002c00 only
• Huawei RP200 Firmware: version v500r002c00spc200 only; version v600r006c00 only
• Huawei TE30 Firmware: version v100r001c10 only; version v600r006c00 only
• Huawei TE40 Firmware: version v600r006c00 only
• Huawei TE50 Firmware: version v600r006c00 only
• Huawei TE60 Firmware: version v100r001c10 only; version v500r002c00 only; version v600r006c00 only

Published 2020-01-21. Last modified 2026-06-17.