Skip to content
OpenAdvisories

Weakness (CWE)

CWE-371: State Issues

Category Draft Mapping prohibited

Weaknesses in this category are related to improper management of system state.

Source: MITRE CWE-371

All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium 4.3
    CVE-2026-124567

    fushengqian fuint ClientOrderController.java receipt state issue

    A flaw has been found in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. This issue affects the function receipt of the file ClientOrderController.java. Executing a manipulation can lead to state issue. The attack may be performed from remot…

    fushengqian fuint
  • Medium 5.3
    CVE-2026-82551

    Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue

    A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploi…

    Linux Foundation Magma
  • Low 3.3
    CVE-2026-14685

    HdrHistogram AbstractHistogram AbstractHistogram.java recordValueWithCount state issue

    A vulnerability has been found in HdrHistogram up to 2.2.2. This vulnerability affects the function recordValueWithCount of the file src/main/java/org/HdrHistogram/AbstractHistogram.java of the component AbstractHistogram. Such manipulation of the argument Co…

    hdrhistogram hdrhistogram Debian Ubuntu
  • High 8.6
    CVE-2024-20455

    A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of C…

    Cisco Cisco IOS XE Software Cisco IOS XE Catalyst SD-WAN iOS Network devices
  • High 7.5
    CVE-2020-3574

    Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability

    A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming calls, drop connected calls, or unexpectedly reload. The vulnerability is due to in…

    Cisco Cisco IP Phones with Multiplatform Firmware Network devices
  • High 8.6
    CVE-2020-3422

    Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability

    A vulnerability in the IP Service Level Agreement (SLA) responder feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the IP SLA responder to reuse an existing port, resulting in a denial of service (DoS) condition. The v…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.4
    CVE-2020-3385

    Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

    A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient handling of…

    Cisco Cisco SD-WAN vEdge Router Network devices
  • High 7.7
    CVE-2020-3200

    Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability

    A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to an internal state not being represented corr…

    Cisco Cisco IOS 12.2(58)SE iOS Network devices
  • Medium 6.8
    CVE-2019-1977

    Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning Vulnerability

    A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an endpoint devic…

    Cisco Cisco Nexus 9000 Series Fabric Switches in ACI Network devices
  • Medium 6.8
    CVE-2018-0282

    Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability

    A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control …

    Cisco Cisco IOS iOS Network devices