CVE-2018-5234

Severity: high (CVSS 8.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-04-30 · updated 2026-06-17

Description

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software.

Affected products

Norton Core: before 237 — fixed in 237

How to fix

Upgrade to a fixed version: Norton Core 237. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/103955
https://www.exploit-db.com/exploits/44574/
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180430_00
http://www.securityfocus.com/bid/103955
https://www.exploit-db.com/exploits/44574/
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180430_00

Get alerted when CVE-2018-5234 or the next vulnerability affects your stack