CVE-2019-6147: forcepoint next_generation_firewall_security_management_center Incorrect Type Conversion or Cast
Vulnerability summary
CVE-2019-6147 is a medium (CVSS 5.9) Incorrect Type Conversion or Cast vulnerability in forcepoint next_generation_firewall_security_management_center. EPSS estimates a 0.70% chance of exploitation in the next 30 days, higher than 52.3% of scored vulnerabilities.
Timeline
- 23-12-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next Generation Firewall (NGFW), possibly resulting in settings that are weaker than expected. All SMC versions lower than 6.5.12 or 6.7.1 are vulnerable.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.70%
Chance of exploitation in the next 30 days
Percentile
52%
Versus all other CVEs
30-day change
0.00 pp
From 0.70% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Forcepoint2 products
- next_generation_firewall_security_management_center< 6.5.12 | ≥ 6.6.0, < 6.7.1
- ngfw security management centerAny version lower than 6.5.12 or 6.7.1
1 vendor · 2 products