CVE-2016-7541

MEDIUM

FortiOS 5.x < 5.4.0 - Security Policy Bypass during IPS Signature Update in Flow Mode

Title source: llm
STIX 2.1

Description

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94477
Not Applicable x_refsource_confirm
http://fortiguard.com/advisory/FG-IR-16-088

Scores

CVSS v3 5.9
EPSS 0.0023
EPSS Percentile 45.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-254
Status published
Products (27)
fortinet/fortios 5.0.0
fortinet/fortios 5.0.1
fortinet/fortios 5.0.2
fortinet/fortios 5.0.3
fortinet/fortios 5.0.4
fortinet/fortios 5.0.5
fortinet/fortios 5.0.6
fortinet/fortios 5.0.7
fortinet/fortios 5.0.8
fortinet/fortios 5.0.9
... and 17 more
Published Mar 30, 2017
Tracked Since Feb 18, 2026