CWEweakness

CWE-437 Incomplete Model of Endpoint Features

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.

Common consequences

• Integrity, Other: Unexpected State, Varies by Context

Observed examples

• CVE-2024-55629: network-based IDS does not model how TCP endpoints handle TCP urgent data, allowing attackers to bypass detection

Related

Observed example · CVE (1)

  • CVE-2024-55629 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. vulnerability

Child of · CWE (1)

  • CWE-436 Interpretation Conflict weakness

Referenced by CVE · weakness (4)

  • CVE-2024-57176 An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal and access sensitive… vulnerability
  • CVE-2024-55629 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. vulnerability
  • CVE-2023-20084 A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade… vulnerability
  • CVE-2016-8365 OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Version 2.8.0;… vulnerability