CVE-2018-5234

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software.

Affected

Symantec Corporation · Norton Core

CVSS v3.0 NVD

8.0 HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

8.3 HIGHAV:A/AC:L/Au:N/C:C/I:C/A:C

EPSS

15.27% chance of exploitation in the next 30 days, 97th percentile

Published

2018-04-30

Updated

2024-09-16

Proof-of-concept exploits (1)

• embedi/ble_norton_core31★ · 2018-05-02

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44574

Security advisories

• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_adviso…
• http://www.securityfocus.com/bid/103955

References

• CVE Record
• NVD entry

Related

• CVE-2017-11882
• CVE-2017-5689
• CVE-2017-5721