CVE-2018-5234

Description

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software.

Primary references

• secure@symantec.com — Third Party Advisory, VDB Entry
• secure@symantec.com — Exploit, Third Party Advisory, VDB Entry
• secure@symantec.com — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory