Configuration Database Corruption in Forcepoint NGFW Security Management Center

CVE-2019-6147

What is CVE-2019-6147?

The Forcepoint NGFW Security Management Center (SMC) has a vulnerability affecting versions prior to 6.5.12 and 6.7.1, which can lead to corruption of its internal configuration database. This rare issue may arise under specific circumstances, resulting in an incorrect IPsec configuration for the Forcepoint Next Generation Firewall (NGFW). As a result, the firewall settings may be weaker than intended, which could compromise the overall security posture of the network.

References