Symantec Norton Core Firmware vulnerabilities

2 CVEs affecting Symantec Norton Core Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-9695, published 2019-03-29.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-5234, published 2018-04-30. High severity, CVSS 8.0. EPSS: 15.3% chance of exploitation in the next 30 days. The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable…
• CVE-2019-9695, published 2019-03-29. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or…