Weakness (CWE)
CWE-239: Failure to Handle Incomplete Element
Variant Draft
The product does not properly handle when a particular element is not completely specified.
Source: MITRE CWE-239
2 results · Clear filters · Feed
-
High 7.5
Sauter: Crash via Incomplete SOAP Request
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.
-
High 8.2
RVD#2568: Apache server is vulnerable to a DoS
The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.