CVEbaza.pl › Słownik CWE › CWE-239

Common Weakness Enumeration

CWE-239

Failure to Handle Incomplete Element

Kategoria: VariantCVE: 3

Opis

Produkt nie obsługuje prawidłowo sytuacji, gdy dany element nie jest w pełni określony. Może to prowadzić do nieoczekiwanego zachowania systemu lub podatności na ataki.

Description (EN)

The product does not properly handle when a particular element is not completely specified.

Podatności CVE z CWE-239 (3)

7.5

CVSS

HIGH

CVE-2025-41724

An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.

pub. 2025-10-22

7.5

CVSS

HIGH

CVE-2020-10280

The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.

pub. 2020-06-24

4.3

CVSS

MEDIUM

CVE-2024-29155

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.

pub. 2024-10-16

Informacje

ID: CWE-239

Typ: Variant

Podatności: 3

MITRE CWE ↗

← Słownik CWE