Authentication flaw

2019-12-0918:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

JSON

Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue that could potentially allow a threat actor to create or modify application user accounts without proper authentication.

CPENameOperatorVersion
industrial_control_system_protectionge6.0.0
industrial_control_system_protectionlt6.1.1.123

CPE	Name	Operator	Version
	industrial_control_system_protection	ge	6.0.0
	industrial_control_system_protection	lt	6.1.1.123

References

support.symantec.com/us/en/article.SYMSA1500.html