CVE-2016-7541

—

CVSS 3.0

5.9 medium

EPSS

<1%p59

Published

Mar 30, 2017 (Mar 30, 2017)

Modified

Jun 17, 2026

Description

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.

Vendors: fortinet
Products: fortios
Weakness: CWE-254
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.