Forcepoint Security Engine Ngfw
Monthly
Security policy bypass in Forcepoint Security Engine (NGFW) versions 7.1.0 through 7.1.13, 7.3.0 through 7.3.1, 7.3.3, 7.4.0 through 7.4.1, and 7.5.0 allows unauthenticated network attackers to defeat the enforcement policy the appliance is supposed to apply to traffic passing through it. Because the appliance itself is not the target, impact falls on downstream systems that the NGFW is meant to protect - an attacker who exploits the flaw can make traffic the policy should block appear permitted, with high integrity impact on those subsequent systems (scope-changed). The CVSS 4.0 base score is 7.9 (AV:N/AC:L/AT:N/PR:N/UI:N with subsequent-system impact H/H/H) and the issue is tagged as an authentication bypass; no CISA KEV entry is present and no public exploit code has been identified at time of analysis, though no EPSS data was supplied for this CVE. Exploitation is limited primarily by deployment context rather than access difficulty - the target must actually be enforcing a policy the bypass can negate.
Security policy bypass in Forcepoint Security Engine (NGFW) versions 7.1.0 through 7.1.13, 7.3.0 through 7.3.1, 7.3.3, 7.4.0 through 7.4.1, and 7.5.0 allows unauthenticated network attackers to defeat the enforcement policy the appliance is supposed to apply to traffic passing through it. Because the appliance itself is not the target, impact falls on downstream systems that the NGFW is meant to protect - an attacker who exploits the flaw can make traffic the policy should block appear permitted, with high integrity impact on those subsequent systems (scope-changed). The CVSS 4.0 base score is 7.9 (AV:N/AC:L/AT:N/PR:N/UI:N with subsequent-system impact H/H/H) and the issue is tagged as an authentication bypass; no CISA KEV entry is present and no public exploit code has been identified at time of analysis, though no EPSS data was supplied for this CVE. Exploitation is limited primarily by deployment context rather than access difficulty - the target must actually be enforcing a policy the bypass can negate.