PT-2021-23319
CVE-2021-41530
·
Published
2021-10-04
·
Updated
2021-10-12
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Forcepoint NGFW Engine versions 6.5.11 and earlier
Forcepoint NGFW Engine versions 6.8.6 and earlier
Forcepoint NGFW Engine version 6.10.0
Description
The issue is related to TCP reflected amplification, which occurs when HTTP User Response has been configured.
Recommendations
For Forcepoint NGFW Engine versions 6.5.11 and earlier, consider disabling the HTTP User Response configuration to mitigate the risk.
For Forcepoint NGFW Engine versions 6.8.6 and earlier, consider disabling the HTTP User Response configuration to mitigate the risk.
For Forcepoint NGFW Engine version 6.10.0, consider disabling the HTTP User Response configuration to mitigate the risk.
Found an issue in the description? Have something to add? Feel free to write us 👾