Weakness (CWE)
CWE-187: Partial String Comparison
Variant Incomplete
The product performs a string comparison that only examines a portion of the string before determining whether there is a match.
How to prevent it (1 mitigation)
-
Testing
Thoroughly test the comparison scheme before deploying code into production. Perform positive testing as well as negative testing.
Source: MITRE CWE-187
2 results · Clear filters · Feed
-
Low 1.8
OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation
OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6, a vulnerability in the hotplug_call function allows an attacker to bypass environment variable filtering and inject an arbitrary PATH variable, potentially l…
-
Low 3.7
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGED…