CVE-2019-6147
Medium
Description
Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next Generation Firewall (NGFW), possibly resulting in settings that are weaker than expected. All SMC versions lower than 6.5.12 or 6.7.1 are vulnerable.
SeverityMedium
CVSS5.9
Exploit probability—
ProductForcepoint Next Generation Firewall Security Management Center
PublishedDec 23, 2019
First seenDec 23, 2019
How to fix
Update
- forcepoint next_generation_firewall_security_management_center6.5.12, 6.7.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| forcepoint next_generation_firewall_security_management_center | v < 6.5.12, 6.6.0 ≤ v < 6.7.1 | 6.5.12, 6.7.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.