Vulnerability Description
Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other VPNs and conduct flooding attacks via a crafted MPLS forwarding packet, aka a "VPN routing and forwarding (VRF) hopping vulnerability."
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Ne Router Software | <= v800r006 |
| Huawei | Ne20E-S | - |
| Huawei | Ne40E-M | - |
| Huawei | Ne40E-M2 | - |
| Huawei | Ne40E | - |
| Huawei | Ne80E | - |
Related Weaknesses (CWE)
References
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/Vendor Advisory
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/Vendor Advisory
FAQ
What is CVE-2015-8087?
CVE-2015-8087 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other...
How severe is CVE-2015-8087?
CVE-2015-8087 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-8087?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ne Router Software, Huawei Ne20E-S, Huawei Ne40E-M, Huawei Ne40E-M2, Huawei Ne40E.