CVE-2018-11543 Details
Description
A Local File Inclusion (LFI) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It affects the SWe Lite devices 6.1.x up to Build 111 and 7.0.x up to Build 140.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/CyberSKR/6914c2c2c8a550d6555137a3ff756df4 | CVE | Third Party Advisory |
| https://support.sonus.net/display/UXDOC61/SBC+Edge+6.1.6+Release+Notes | CVE | Permissions RequiredThird Party Advisory |
| https://gist.github.com/CyberSKR/6914c2c2c8a550d6555137a3ff756df4 | [email protected] | Third Party Advisory |
| https://support.sonus.net/display/UXDOC61/SBC+Edge+6.1.6+Release+Notes | [email protected] | Permissions RequiredThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ribboncommunications sonus sbc 1000 firmware | 6.0.0 6.1.0 7.0.0 |
CPE
Remediation
| |
| ribboncommunications sonus sbc 1000 | All versions |
CPE
Remediation
| |
| ribboncommunications sonus sbc 2000 firmware | 6.0.0 6.1.0 7.0.0 |
CPE
Remediation
| |
| ribboncommunications sonus sbc 2000 | All versions |
CPE
Remediation
| |
| ribboncommunications sbc swe lite firmware | 6.1.0 7.0.0 |
CPE
Remediation
| |
| ribboncommunications sbc swe lite | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Sep 12, 2018 | Reanalysis | [email protected] |
| Sep 11, 2018 | Initial Analysis | [email protected] |