CVE-2015-8087

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-11-19 · updated 2026-06-17
Weakness: CWE-399

Description

Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other VPNs and conduct flooding attacks via a crafted MPLS forwarding packet, aka a "VPN routing and forwarding (VRF) hopping vulnerability."

Affected products

Huawei Ne Router Software: through v800r006; through v800r007c00

References

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm

Get alerted when CVE-2015-8087 or the next vulnerability affects your stack