PT-2019-15386
CVE-2019-18380
·
Published
2019-12-09
·
Updated
2019-12-17
Description by
CVSS 3.1
6.5
MediumMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Symantec Industrial Control System Protection (ICSP) versions 6.x.x
Description
The issue allows a threat actor to create or modify application user accounts without proper authentication, potentially leading to unauthorized access.
Recommendations
For Symantec Industrial Control System Protection (ICSP) versions 6.x.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾