CVE-2016-7541

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
fortinetCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 45%
VendorProductVersion
fortinetfortios
5.0.0
fortinetfortios
5.0.1
fortinetfortios
5.0.2
fortinetfortios
5.0.3
fortinetfortios
5.0.4
fortinetfortios
5.0.5
fortinetfortios
5.0.6
fortinetfortios
5.0.7
fortinetfortios
5.0.8
fortinetfortios
5.0.9
fortinetfortios
5.0.10
fortinetfortios
5.0.11
fortinetfortios
5.0.12
fortinetfortios
5.0.13
fortinetfortios
5.0.14
fortinetfortios
5.2.0
fortinetfortios
5.2.1
fortinetfortios
5.2.2
fortinetfortios
5.2.3
fortinetfortios
5.2.4
fortinetfortios
5.2.5
fortinetfortios
5.2.6
fortinetfortios
5.2.7
fortinetfortios
5.2.8
fortinetfortios
5.2.9
fortinetfortios
5.2.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration