Ribbon Communications

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Ribbon Communications records in CISA KEV

No Ribbon Communications vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sonus Sbc 1000 Firmware 3 records MEDIUM Sonus Sbc 2000 Firmware 3 records MEDIUM Sbc Swe Lite Firmware 2 records MEDIUM Edgemarc Firmware 1 record HIGH Sbc Swe Lite Web 1 record MEDIUM

Records

9 records

TI-2017-03984 CVE-2017-6079 · GHSA-4w4r-mv2h-54x5

The HTTP web-management application on Edgewater Networks Edgemarc appliances has a…

HIGH 72

The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.46846 Published 2017-05-16 No fix listed

TI-2018-08252 CVE-2018-11542 · GHSA-pwx2-pr73-v4p7

A Remote Command Execution (RCE) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe…

MEDIUM 48

A Remote Command Execution (RCE) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the execution of arbitrary commands via an unspecified vector.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03436 Published 2018-07-09 No fix listed

TI-2018-08251 CVE-2018-11541 · GHSA-fxv8-qv4g-wmhw

A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite…

MEDIUM 46

A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows unauthorised access to privileged content via an unspecified vector.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01751 Published 2018-07-09 No fix listed CWE-862

TI-2025-16966 CVE-2025-23181 · GHSA-c99q-9gjf-fc69

Ribbon Communications - CWE-250: Execution with Unnecessary Privileges

LOW 37

CWE-250: Execution with Unnecessary Privileges

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00302 Published 2025-04-29 No fix listed CWE-250

TI-2025-16965 CVE-2025-23180 · GHSA-j55m-95wq-jp26

Ribbon Communications - CWE-250: Execution with Unnecessary Privileges

LOW 37

CWE-250: Execution with Unnecessary Privileges

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00302 Published 2025-04-29 No fix listed CWE-250

TI-2018-08253 CVE-2018-11543 · GHSA-3w6f-wrm9-g4x7

A Local File Inclusion (LFI) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe…

LOW 36

A Local File Inclusion (LFI) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an unspecified vector.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01611 Published 2018-07-09 No fix listed CWE-22

TI-2025-16963 CVE-2025-23178 · GHSA-q6q7-9hj5-2656

Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

LOW 33

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00269 Published 2025-04-29 No fix listed CWE-923

TI-2025-16962 CVE-2025-23177 · GHSA-3wr4-hqc2-phf3

Ribbon Communications - CWE-427: Uncontrolled Search Path Element

LOW 33

CWE-427: Uncontrolled Search Path Element

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00308 Published 2025-04-29 No fix listed CWE-427

TI-2025-16964 CVE-2025-23179 · GHSA-6762-8x76-3vrf

Ribbon Communications - CWE-798: Use of Hard-coded Credentials

LOW 24

CWE-798: Use of Hard-coded Credentials

CVSS 3.1MEDIUM 5.5 Adjacent network Low privileges No interaction EPSS 0.00192 Published 2025-04-29 No fix listed CWE-798

Open these records in search →

Critical	3
High	5
Medium	1
Low	0
No CVSS	0