CVEs-PoC/2016/CVE-2016-7541.md

### [CVE-2016-7541](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7541)
![](https://img.shields.io/static/v1?label=Product&message=FortiOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=5.0.x%2C%205.2.x%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Protection%20bypass&color=brightgreen)

### Description

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.

### POC

#### Reference
- http://fortiguard.com/advisory/FG-IR-16-088

#### Github
No PoCs found on GitHub currently.