{"cve":"CVE-2018-11542","nvd":{"published":"2018-07-09T12:29:00.360","modified":"2026-06-17T01:36:08.043","status":"Modified","description":"A Remote Command Execution (RCE) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the execution of arbitrary commands via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It affects the SWe Lite devices 6.1.x up to Build 111 and 7.0.x up to Build 140.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":[],"references":["https://gist.github.com/CyberSKR/a2a8c76174578605af7bdbf53acebe1b","https://support.sonus.net/display/UXDOC61/SBC+Edge+6.1.6+Release+Notes","https://gist.github.com/CyberSKR/a2a8c76174578605af7bdbf53acebe1b","https://support.sonus.net/display/UXDOC61/SBC+Edge+6.1.6+Release+Notes"],"products":["ribboncommunications:sbc_swe_lite_firmware","ribboncommunications:sonus_sbc_1000_firmware","ribboncommunications:sonus_sbc_2000_firmware"],"source":"nvd","synced_at":"2026-10-19T20:51:47.459859389+00:00"},"epss":{"cve":"CVE-2018-11542","score":0.03436,"percentile":0.88962,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}