CVE-2019-18380: Symantec Industrial Control System Protection

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue that could potentially allow a threat actor to create or modify application user accounts without proper authentication.

Affected products

• Symantec Industrial Control System Protection: from 6.0.0, before 6.1.1.123 (fixed in 6.1.1.123)

Published 2019-12-09. Last modified 2026-06-17.