{"id":"CVE-2018-11541","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-11541","generatedAt":"2026-10-28T21:31:02.419Z","title":"A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows unauthorised access to privileged content via an unspecified vector.","description":"A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows unauthorised access to privileged content via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It affects the SWe Lite devices 6.1.x up to Build 111 and 7.0.x up to Build 140.","published":"2018-07-09T12:29:00.000Z","lastModified":"2026-06-17T01:36:08.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-862"],"affected":["ribboncommunications/sonus sbc 1000 firmware","ribboncommunications/sonus sbc 2000 firmware","ribboncommunications/sbc swe lite web"],"epss":{"score":0.01751,"percentile":0.77761,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.75%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://gist.github.com/CyberSKR/0134dff8f48d2e7b87227c554404bfcb","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://support.sonus.net/display/UXDOC61/SBC+Edge+6.1.6+Release+Notes","tags":["Permissions Required","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://gist.github.com/CyberSKR/0134dff8f48d2e7b87227c554404bfcb","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.sonus.net/display/UXDOC61/SBC+Edge+6.1.6+Release+Notes","tags":["Permissions Required","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-11541","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}