Symantec Vulnerabilities and Affected Products
Vulnerabilities associated with Critical System Protection (CSP).
Products
Clear product- IT Management Suite3 vulnerabilities
- Norton Mobile Security for Android3 vulnerabilities
- Endpoint Encryption2 vulnerabilities
- endpoint_protection_manager2 vulnerabilities
- Messaging Gateway2 vulnerabilities
- Symantec Messaging Gateway2 vulnerabilities
- Carbon Black Cloud Windows Sensor1 vulnerability
- Critical System Protection (CSP)1 vulnerability
- Data Loss Prevention1 vulnerability
- Deployment Solution1 vulnerability
- Encryption Desktop1 vulnerability
- Endpoint Detection and Response (SEDR)1 vulnerability
- Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client1 vulnerability
- Ghost Solution Suite1 vulnerability
- Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 3601 vulnerability
- Norton App Lock1 vulnerability
- Norton AppLock1 vulnerability
- Norton Download Manager1 vulnerability
- Norton Power Eraser1 vulnerability
- PC Tools Internet Security1 vulnerability
- Server Management Suite1 vulnerability
- server_management_suite1 vulnerability
- SONAR Component1 vulnerability
- Symantec Diagnostic Tool1 vulnerability
- Symantec Endpoint Encryption1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-18374CRITICAL | Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing authentication controls. CWE-287Nov 25, 2019 | CVSS9.8v3.1 | EPSS1.67% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |