CVE-2019-18380

2019-12-0917:28:11

symantec

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

JSON

Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue that could potentially allow a threat actor to create or modify application user accounts without proper authentication.

CNA Affected

[
  {
    "product": "Industrial Control System Protection (ICSP)",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "6.x.x"
      }
    ]
  }
]

References

support.symantec.com/us/en/article.SYMSA1500.html