CWE-207: Observable Behavioral Discrepancy With Equivalent Products

Filter

The product operates in an environment in which its existence or specific identity should not be known, but it behaves differently than other products with equivalent functionality, in a way that is observable to an attacker.

What the weakness is: CWE-207 at MITRE. All weaknesses

Ask an AI about CWE-207

ChatGPT Claude Google AI Mode

Show the prompt

Explain CWE-207: Observable Behavioral Discrepancy With Equivalent Products and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/207.html and https://cve.bz/cve/cwe/207?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

4.3CVE-2025-41657EPSS 0.2%2025-06-10
Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.