Vulnerabilities > CVE-2018-5234 - Unspecified vulnerability in Symantec Norton Core Firmware
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 | |
| Hardware | 1 |
Exploit-Db
| description | Norton Core Secure WiFi Router - 'BLE' Command Injection (PoC). CVE-2018-5234. Remote exploit for Hardware platform |
| file | exploits/hardware/remote/44574.txt |
| id | EDB-ID:44574 |
| last seen | 2018-05-24 |
| modified | 2018-05-02 |
| platform | hardware |
| port | |
| published | 2018-05-02 |
| reporter | Exploit-DB |
| source | https://www.exploit-db.com/download/44574/ |
| title | Norton Core Secure WiFi Router - 'BLE' Command Injection (PoC) |
| type | remote |
References
- http://www.securityfocus.com/bid/103955
- http://www.securityfocus.com/bid/103955
- https://www.exploit-db.com/exploits/44574/
- https://www.exploit-db.com/exploits/44574/
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180430_00
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180430_00