Weakness (CWE)

CWE-394: Unexpected Status Code or Return Value

Base Draft

The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.

Source: MITRE CWE-394

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Low 2.9

CVE-2026-73064

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove …

TrustedFirmware Mbed TLS mbedtls mbedtls Debian Ubuntu

Sep 24, 2026
Low 2.7

CVE-2023-48429

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices doe…

Siemens SINEC INS ICS / OT

Dec 12, 2023

CWE-394: Unexpected Status Code or Return Value

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove …

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices doe…