Skip to content
OpenAdvisories

Weakness (CWE)

CWE-794: Incomplete Filtering of Multiple Instances of Special Elements

Variant Incomplete

The product receives data from an upstream component, but it does not filter all instances of a special element before sending it to a downstream component.

More detail

Incomplete filtering of this nature may be applied to:

- sequential elements (special elements that appear next to each other) or

- non-sequential elements (special elements that appear multiple times in different locations).

Source: MITRE CWE-794

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2021-0233

    Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.

    A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a Forwarding Engine Board (FFEB) crash. Continued recei…

    Juniper Networks Junos OS Network devices
  • High 8.6
    CVE-2021-0203

    Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

    On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffi…

    Juniper Networks Junos OS Network devices