PT-2019-15386 · Symantec · Symantec Industrial Control System Protection

Published 2019-12-09 · Updated 2019-12-17 · CVE-2019-18380

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Symantec Industrial Control System Protection (ICSP) versions 6.x.x

Description The issue allows a threat actor to create or modify application user accounts without proper authentication, potentially leading to unauthorized access.

Recommendations For Symantec Industrial Control System Protection (ICSP) versions 6.x.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-18380

Affected Products

Symantec Industrial Control System Protection

References · 3

• https://osv.dev/vulnerability/CVE-2019-18380 · Vendor Advisory
• https://support.symantec.com/us/en/article.SYMSA1500.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18380 · Security Note