High severity · published Oct 4, 2021
CVE-2021-41530
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been…
7.5
CVSS
0.9%
EPSS
No
On KEV
Description
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NG
Next Generation Firewall · Forcepoint
through 6.5.11; 6.8.0 through 6.8.6; 6.10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-41530
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-41530
Mitigation
https://help.forcepoint.com/security/CVE/CVE-2021-41530.html
More from Next Generation Firewall
9.1
CVE-2019-6143
Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially…
7.8
CVE-2025-12690
Local Privilege Escalation in NGFW Engine