CVE-2019-9695: Symantec Norton Core Firmware

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or code on a target machine or in a target process. Note that this exploit is only possible with direct physical access to the device.

Affected products

• Symantec Norton Core Firmware: before 278 (fixed in 278)

Published 2019-03-29. Last modified 2026-06-17.