CVE-2015-8087: Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E ro...

Security readout for executives and security teams

This vulnerability affects specific Huawei carrier routers running older software. A remote attacker could abuse crafted MPLS forwarding traffic to cross VPN routing boundaries or cause flooding, undermining tenant or customer isolation in MPLS VPN environments. Exposure is likely limited to organizations operating the named Huawei router models in MPLS VPN or VRF-segmented routing environments on vulnerable software. The source bundle does not identify generic Huawei routers, endpoints, cloud services, or non-MPLS deployments as affected. Treat this as high priority where affected Huawei routers support customer, partner, or internal MPLS VPN separation. The business concern is loss of network isolation and potential service disruption, not ordinary endpoint compromise. Mitigation focus: Inventory Huawei NE20E-S, NE40E-M, NE40E-M2, NE40E, and NE80E routers.; Upgrade affected models to the fixed V800R007 releases or later where applicable.; Review Huawei PSIRT advisory hw-457933 for model-specific remediation guidance..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.