The Norton Core router prior to v237 may be susceptible to a command injection exploit.

Summary

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software.

Timeline

1. Apr 30, 2018, 6:00 PM UTCCVE published
2. May 2, 2018Public exploit on Exploit-DB

   EDB-44574

3. Sep 16, 2024, 10:40 PM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• Symantec Corporation Norton Core

  Prior to v237

References 6