CVE-2018-11551: Nch Axon Pbx

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists because a DLL file is loaded by 'pbxsetup.exe' improperly.

Affected products

• Nch Axon Pbx: version 2.02 only

Published 2018-06-01. Last modified 2026-06-17.