CVE-2018-5234: The Norton Core router prior to v237 may be susceptible to a command injection exploit.

Security readout for executives and security teams

CVE-2018-5234 affects Norton Core routers before firmware v237. The reported weakness is command injection, meaning vulnerable software may allow arbitrary operating-system commands to run on the router. That can matter because a router is a network control point. Public exploit coverage is referenced, but the supplied sources do not show confirmed active exploitation. Exposure is limited to organizations or homes that still operate Symantec Norton Core routers with firmware earlier than v237. The source bundle does not identify other Norton, Symantec, or Broadcom products as affected. Treat as a high-priority legacy-network-device issue if Norton Core is present. The affected product is a router, the weakness can lead to command execution, and public exploit tracking exists. If no Norton Core devices are deployed, business urgency is low. Mitigation focus: Inventory all Norton Core routers and record firmware versions.; Update affected Norton Core devices to v237 or later where available.; Review the Symantec advisory for vendor-specific remediation guidance..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.