Critical severity9.1NVD Advisory· Published Jul 7, 2022· Updated Jun 17, 2026

CVE-2021-46825

Description

Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web server responses to unintended clients. Severity/CVSSv3: High / 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Broadcom Corporation/Advanced Secure Gateway3 versions
cpe:2.3:a:broadcom:advanced_secure_gateway:6.7:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:broadcom:advanced_secure_gateway:6.7:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:advanced_secure_gateway:7.3:*:*:*:*:*:*:*
- (no CPE)
Broadcom Corporation/Proxysg2 versions
cpe:2.3:a:broadcom:proxysg:6.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:broadcom:proxysg:6.7:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:proxysg:7.3:*:*:*:*:*:*:*
Symantec/Advanced Secure Gateway and ProxySGdescription
Symantec/Advanced Secure Gateway (ASG)llm-fuzzy
Symantec/ProxySGllm-fuzzy

Patches

Vulnerability mechanics

References

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20638nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000