CVE-2016-7541

Published: Mar 30, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.

Affected (26)

Products: Fortinet: Fortios

Fortinet

1 product

Fortios

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	Version 5.0.0
Fortinet Fortios	Version 5.0.10
Fortinet Fortios	Version 5.0.11
Fortinet Fortios	Version 5.0.12
Fortinet Fortios	Version 5.0.13
Fortinet Fortios	Version 5.0.14
Fortinet Fortios	Version 5.0.1
Fortinet Fortios	Version 5.0.2
Fortinet Fortios	Version 5.0.3
Fortinet Fortios	Version 5.0.4
Fortinet Fortios	Version 5.0.5
Fortinet Fortios	Version 5.0.6
Fortinet Fortios	Version 5.0.7
Fortinet Fortios	Version 5.0.8
Fortinet Fortios	Version 5.0.9
Fortinet Fortios	Version 5.2.0
Fortinet Fortios	Version 5.2.10
Fortinet Fortios	Version 5.2.1
Fortinet Fortios	Version 5.2.2
Fortinet Fortios	Version 5.2.3
Fortinet Fortios	Version 5.2.4
Fortinet Fortios	Version 5.2.5
Fortinet Fortios	Version 5.2.6
Fortinet Fortios	Version 5.2.7
Fortinet Fortios	Version 5.2.8
Fortinet Fortios	Version 5.2.9

Related CWEs

CWE-254

References (4)

http://fortiguard.com/advisory/FG-IR-16-088

Source: psirt@fortinet.com

Not Applicable

http://www.securityfocus.com/bid/94477

Source: psirt@fortinet.com

Third Party AdvisoryVDB Entry

http://fortiguard.com/advisory/FG-IR-16-088

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://www.securityfocus.com/bid/94477

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.