CWE-437: Incomplete Model of Endpoint Features
Filter
A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.
What the weakness is: CWE-437 at MITRE. All weaknesses
Ask an AI about CWE-437
Show the prompt
Explain CWE-437: Incomplete Model of Endpoint Features and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/437.html and https://cve.bz/cve/cwe/437?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.6CVE-2024-57176EPSS 0.5%
An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal and access sensitive endpoints via a crafted URL.
- 7.5CVE-2024-55629EPSS 0.5%
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data (out of band data) can lead to Suricata analyzing data differently than …
- 4.4CVE-2023-20084EPSS 0.2%
A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs b…
- 5.5CVE-2016-8365EPSS 0.3%
OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Version 2.8.0; Applications using PI Software Development Kit (SDK) versions prior to PI SDK 2016, Version 1.4.6; PI Buffer …