CVE-2018-5234

High

Description

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software.

SeverityHigh
CVSS8.0
Exploit probability—
ProductSymantec Norton Core Firmware
PublishedApr 30, 2018
First seenApr 30, 2018

How to fix

Update
  • symantec norton_core_firmware237 or later

Affected products

ProductAffected versionsFixed in
symantec norton_core_firmwarev < 237237

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.