PT-2019-15386 · Symantec · Symantec Industrial Control System Protection

Publicado 2019-12-09 · Atualizado 2019-12-17 · CVE-2019-18380

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Symantec Industrial Control System Protection (ICSP) versions 6.x.x

Description The issue allows a threat actor to create or modify application user accounts without proper authentication, potentially leading to unauthorized access.

Recommendations For Symantec Industrial Control System Protection (ICSP) versions 6.x.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2019-18380

Produtos afetados

Symantec Industrial Control System Protection

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-18380 · Aviso do Fabricante
• https://support.symantec.com/us/en/article.SYMSA1500.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-18380 · Nota de Segurança