CVE-2019-9695
Medium
Description
Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or code on a target machine or in a target process. Note that this exploit is only possible with direct physical access to the device.
SeverityMedium
CVSS6.8
Exploit probability—
ProductSymantec Norton Core Firmware
PublishedMar 29, 2019
First seenMar 29, 2019
How to fix
Update
- symantec norton_core_firmware278 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec norton_core_firmware | v < 278 | 278 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.