Design/Logic Flaw

2018-07-0912:29:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

JSON

A Remote Command Execution (RCE) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the execution of arbitrary commands via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It affects the SWe Lite devices 6.1.x up to Build 111 and 7.0.x up to Build 140.

CPENameOperatorVersion
sbc_swe_lite_firmwareeq6.1.0
sbc_swe_lite_firmwareeq7.0.0
sonus_sbc_1000_firmwareeq6.0.0
sonus_sbc_1000_firmwareeq6.1.0
sonus_sbc_1000_firmwareeq7.0.0
sonus_sbc_2000_firmwareeq6.0.0
sonus_sbc_2000_firmwareeq6.1.0
sonus_sbc_2000_firmwareeq7.0.0

Name	Operator	Version
sbc_swe_lite_firmware	eq	6.1.0
sbc_swe_lite_firmware	eq	7.0.0
sonus_sbc_1000_firmware	eq	6.0.0
sonus_sbc_1000_firmware	eq	6.1.0
sonus_sbc_1000_firmware	eq	7.0.0
sonus_sbc_2000_firmware	eq	6.0.0
sonus_sbc_2000_firmware	eq	6.1.0
sonus_sbc_2000_firmware	eq	7.0.0