CVE-2015-8085: Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R0...

Security readout for executives and security teams

This CVE concerns Huawei and Quidway network devices that could let a remote authenticated administrator obtain and decrypt passwords because a reversible encryption algorithm was selectable. The main risk is credential exposure by someone who already has administrative access. Public data in the bundle does not provide CVSS, CWE, or proof of active exploitation. Exposure is most likely in organizations still running the named Huawei or Quidway device families below the fixed software releases. Internet exposure is not established by the sources; the attacker prerequisite is remote authenticated administrator access. Treat this as a moderate infrastructure hygiene issue unless the affected devices manage sensitive network segments or admin access is weakly controlled. Prioritize inventory, upgrade planning, and credential rotation where exposure is confirmed. Mitigation focus: Inventory the named Huawei and Quidway device families and software versions.; Upgrade affected devices to the fixed releases referenced by the CVE and Huawei advisory.; Restrict administrative access to trusted management networks and accounts..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.