CVE-2018-11542

CVE-2018-11542 describes a Remote Command Execution vulnerability in the Sonus SBC family web interfaces (SBC 1000/2000 and SBC SWe Lite). The issue allows execution of arbitrary commands via an unspecified vector. Affected are SBC 1000/2000 devices on firmware 6.0.x up to Build 446, 6.1.x up to ...

CVE-2018-11541

CVE-2018-11541 describes a root privilege escalation in the Sonus SBC 1000/2000 and SBC SWe Lite web interface that allows unauthorised access to privileged content via an unspecified vector. Affected: SBC 1000/2000 devices on 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 48...

CVE-2018-11543

A Local File Inclusion LFI vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It affects...

CVE-2018-11543

The CVE-2018-11543 entry describes a Local File Inclusion (LFI) in the Sonus SBC 1000, SBC 2000, and SBC SWe Lite web interfaces that enables downloading arbitrary files via an unspecified vector. Affected are: SBC 1000/2000 devices from 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up ...

CVE-2018-11541

A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows unauthorised access to privileged content via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It...

CVE-2018-11542: Undefined Security Weakness

A Remote Command Execution RCE vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the execution of arbitrary commands via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It...

CVE-2018-11541: Missing Authorization

A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows unauthorised access to privileged content via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It...

CVE-2018-11543: Improper Limitation of a Pathname to a Restricted Directory

A Local File Inclusion LFI vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It affects...

Engineering Firm Leaks Data on Dell, SBC and Oracle

A Texas-based firm called Power Quality Engineering publicly exposed sensitive electrical infrastructure data on the public internet. Firms impacted by the leak were Dell Technologies, SBC, Freescale, Oracle, Texas Instruments and the City of Austin. Chris Vickery, cyber risk analyst at security...

sbc-treuhand.ch XSS vulnerability

Vulnerable URL: http://www.sbc-treuhand.ch/index.asp?page=links"=off Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Threat Outbreak Alert RuleID24019: Email Messages Distributing Malicious Software on July 29, 2016

Medium Alert ID: 48295 First Published: 2016 July 29 16:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24019 may contain the following files: Name | Siz...

Cisco IOS XE libsrtp DoS (CSCux04317)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and it is configured to use the Cisco Unified Border Element CUBE or Session Border Controller SBC features. It is, therefore, affected by an integer underflow condition in the Secure Real-Time Transport Protocol SRTP...

CVE-2013-4778

CVE-2013-4778 affects Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before specific version updates (OpenScape Branch before 2 R0.32.0 and SBC before 7 R1.7.0). The vulnerability is exposed via core/getLog.php, allowing remote attackers to obtain sens...

CVE-2013-4780

CVE-2013-4780 affects Siemens OpenScape Branch and OpenScape SBC (before 2 R0.32.0 and before 7 R1.7.0). The vulnerability allows remote attackers to read arbitrary files via unspecified vectors. Affected components are core/getLog.php on the Siemens OpenScape appliances; no explicit exploit deta...

CVE-2013-4778

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

CVE-2013-4781: Improper Neutralization of Special Elements used in an OS Command

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2013-4780: Exposure of Sensitive Information to an Unauthorized Actor

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2009-0619

Cisco 7600 Series SBC modules running software before 3.0(2) are affected by CVE-2009-0619. An unauthenticated attacker can cause a denial of service by sending crafted TCP packets to port 2000, triggering a reload of the SBC module (not the router core) and potentially a sustained DoS. Remediati...

CVE-2009-0619: Undefined Security Weakness

Unspecified vulnerability in the Session Border Controller SBC before 3.02 for Cisco 7600 series routers allows remote attackers to cause a denial of service SBC card reload via crafted packets to TCP port 2000...