CVE-2015-8087 - Vulnerability Details - OpenCVE

Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other VPNs and conduct flooding attacks via a crafted MPLS forwarding packet, aka a "VPN routing and forwarding (VRF) hopping vulnerability."

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Huawei	Ne20e-s Ne40e Ne40e-m Ne40e-m2 Ne80e Ne Router Software

Configuration 1 [-]

AND

OR	cpe:2.3:a:huawei:ne_router_software::::::::
	cpe:2.3:a:huawei:ne_router_software::::::::

OR	cpe:2.3:h:huawei:ne20e-s:-:::::::*
	cpe:2.3:h:huawei:ne40e-m:-:::::::*
	cpe:2.3:h:huawei:ne40e-m2:-:::::::*

Configuration 2 [-]

AND

cpe:2.3:a:huawei:ne_router_software:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:huawei:ne40e:-:::::::*
	cpe:2.3:h:huawei:ne80e:-:::::::*

No data.

References

Link	Providers
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-11-19T20:00:00

Updated: 2024-08-06T08:13:31.046Z

Reserved: 2015-11-06T00:00:00

Link: CVE-2015-8087

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2015-11-19T20:59:11.960

Modified: 2025-04-12T10:46:40.837

Link: CVE-2015-8087

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-10-21T00:00:00", "descriptions": [{"lang": "en", "value": "Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other VPNs and conduct flooding attacks via a crafted MPLS forwarding packet, aka a \"VPN routing and forwarding (VRF) hopping vulnerability.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2015-11-19T19:57:02", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2015-8087", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other VPNs and conduct flooding attacks via a crafted MPLS forwarding packet, aka a \"VPN routing and forwarding (VRF) hopping vulnerability.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm", "refsource": "CONFIRM", "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T08:13:31.046Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2015-8087", "datePublished": "2015-11-19T20:00:00", "dateReserved": "2015-11-06T00:00:00", "dateUpdated": "2024-08-06T08:13:31.046Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:huawei:ne_router_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "85E31531-A395-4A57-9C6C-728F20E7B980", "versionEndIncluding": "v800r006", "vulnerable": true}, {"criteria": "cpe:2.3:a:huawei:ne_router_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "98433F99-0D69-48F4-A9F1-E0286117DB6E", "versionEndIncluding": "v800r007c00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ne20e-s:-:*:*:*:*:*:*:*", "matchCriteriaId": "6A01D2B0-26DD-4B96-A81B-19C6C7648174", "vulnerable": false}, {"criteria": "cpe:2.3:h:huawei:ne40e-m:-:*:*:*:*:*:*:*", "matchCriteriaId": "7CF3CC04-C10F-40D0-8EBD-5FD6AB82EA30", "vulnerable": false}, {"criteria": "cpe:2.3:h:huawei:ne40e-m2:-:*:*:*:*:*:*:*", "matchCriteriaId": "28D6CB5E-2D19-46E0-AD6C-ECE67F8CC54F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:huawei:ne_router_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "85E31531-A395-4A57-9C6C-728F20E7B980", "versionEndIncluding": "v800r006", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ne40e:-:*:*:*:*:*:*:*", "matchCriteriaId": "BC8305DE-35FC-4F3C-96E1-FB083D26FCB5", "vulnerable": false}, {"criteria": "cpe:2.3:h:huawei:ne80e:-:*:*:*:*:*:*:*", "matchCriteriaId": "0113DDEA-5205-4E4B-B74B-04918FD00D8E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other VPNs and conduct flooding attacks via a crafted MPLS forwarding packet, aka a \"VPN routing and forwarding (VRF) hopping vulnerability.\""}, {"lang": "es", "value": "Routers Huawei NE20E-S, NE40E-M y NE40E-M2 con software en versiones anteriores a V800R007C10SPC100 y routers NE40E y NE80E con software en versiones anteriores a V800R007C00SPC100 permite a atacantes remotos enviar paquetes a otras VPNs y realizar ataques de inundaci\u00f3n a trav\u00e9s del reenv\u00edo de un paquete MPLS manipulado, tambi\u00e9n conocido como 'VPN routing y forwarding (VRF) hopping vulnerability.'"}], "id": "CVE-2015-8087", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-11-19T20:59:11.960", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457933.htm"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-399"}], "source": "nvd@nist.gov", "type": "Primary"}]}