PT-2018-16825 · Symantec · Norton Core

Published 2018-04-30 · Updated 2019-10-03 · CVE-2018-5234

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Norton Core router versions prior to 237

Description The issue is related to a command injection exploit, which is a type of attack aimed at executing arbitrary commands on the host system via vulnerable software.

Recommendations For versions prior to 237, update to version 237 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2018-5234

Affected Products

Norton Core

References · 6

• 🔥 https://github.com/embedi/ble_norton_core · Exploit
• 🔥 https://exploit-db.com/exploits/44574 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-5234 · Security Note
• https://osv.dev/vulnerability/CVE-2018-5234 · Vendor Advisory
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180430_00 · Vendor Advisory
• http://securityfocus.com/bid/103955 · Note