CVE-2015-8087

Published: Nov 19, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other VPNs and conduct flooding attacks via a crafted MPLS forwarding packet, aka a "VPN routing and forwarding (VRF) hopping vulnerability."

Affected (2)

Products: Huawei: Ne Router Software

Huawei

1 product

Ne Router Software

Configuration A

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Huawei Ne Router Software	Up to v800r007c00

Running on/with	Platform Versions
Huawei Ne20e S	All versions
Huawei Ne40e M	All versions
Huawei Ne40e M2	All versions

Configuration B

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Huawei Ne Router Software	Up to v800r006

Running on/with	Platform Versions
Huawei Ne40e	All versions
Huawei Ne80e	All versions

Related CWEs

CWE-399

References (2)

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm

Source: cve@mitre.org

Vendor Advisory

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.