The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fortios | Fortinet | 2.5_0mr4 (including) | 2.5_0mr4 (including) |
| Fortios | Fortinet | 2.8_mr10 (including) | 2.8_mr10 (including) |
| Fortios | Fortinet | 2.36 (including) | 2.36 (including) |
| Fortios | Fortinet | 2.50 (including) | 2.50 (including) |
| Fortios | Fortinet | 2.50_mr5 (including) | 2.50_mr5 (including) |
| Fortios | Fortinet | 2.80 (including) | 2.80 (including) |
| Fortios | Fortinet | 3.0 (including) | 3.0 (including) |
| Fortios | Fortinet | 3.0_beta (including) | 3.0_beta (including) |
| Fortios | Fortinet | 3.0_mr1 (including) | 3.0_mr1 (including) |