Vulnerability Details CVE-2018-5234
The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.224
EPSS Ranking 95.5%
CVSS Severity
CVSS v3 Score 8.0
CVSS v2 Score 8.3
References
- http://www.securityfocus.com/bid/103955
- https://www.exploit-db.com/exploits/44574/
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180430_00
- http://www.securityfocus.com/bid/103955
- https://www.exploit-db.com/exploits/44574/
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180430_00
Products affected by CVE-2018-5234
-
cpe:2.3:h:symantec:norton_core:-
-
cpe:2.3:o:symantec:norton_core_firmware:*