Skip to content
OpenAdvisories

Weakness (CWE)

CWE-239: Failure to Handle Incomplete Element

Variant Draft

The product does not properly handle when a particular element is not completely specified.

Source: MITRE CWE-239

3 results · Feed

  • High 7.5

    Sauter: Crash via Incomplete SOAP Request

    An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.

  • Medium 4.3

    Denial of service on Microchip RN4870 devices

    On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, cau…

  • High 8.2

    RVD#2568: Apache server is vulnerable to a DoS

    The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.