PT-2021-23319 · Forcepoint · Forcepoint Ngfw Engine

Published 2021-10-04 · Updated 2021-10-12 · CVE-2021-41530

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Forcepoint NGFW Engine versions 6.5.11 and earlier Forcepoint NGFW Engine versions 6.8.6 and earlier Forcepoint NGFW Engine version 6.10.0

Description The issue is related to TCP reflected amplification, which occurs when HTTP User Response has been configured.

Recommendations For Forcepoint NGFW Engine versions 6.5.11 and earlier, consider disabling the HTTP User Response configuration to mitigate the risk. For Forcepoint NGFW Engine versions 6.8.6 and earlier, consider disabling the HTTP User Response configuration to mitigate the risk. For Forcepoint NGFW Engine version 6.10.0, consider disabling the HTTP User Response configuration to mitigate the risk.

Fix

Related Identifiers

CVE-2021-41530

Affected Products

Forcepoint Ngfw Engine

References · 4

• https://help.forcepoint.com/security/CVE/CVE-2021-41530.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41530 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41530 · Security Note
• https://t.me/cibsecurity/29887 · Telegram Post