CVE-2019-6147 - CVE House
Back to Database
Status published Medium CVE-2019-6147

Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12...

Vulnerability Description

Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next Generation Firewall (NGFW), possibly resulting in settings that are weaker than expected. All SMC versions lower than 6.5.12 or 6.7.1 are vulnerable.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-6147

Credits & Attribution

No credits recorded in the NVD database.

References

More from Forcepoint

View All →
CVE-2025-2274
Stored Cross Site Scripting in Forcepoint Web Security
Medium 4.8
CVE-2025-2272
Privilege Escalation and Arbitrary code execution in F1E Endpoint
High 7.3
CVE-2025-14026
Vulnerable Python version used in Forcepoint One DLP Client
Unknown 0
CVE-2025-12694
Local Privilege Escalation in VPN Client
High 8.5
CVE-2025-12690
Local Privilege Escalation in NGFW Engine
High 7.3

Affected Vendor

Affected Software

NGFW Security Management Center
Vulnerable Versions:
Any version lower than 6.5.12 or 6.7.1

Timeline

Official Publish: December 23rd, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.