CyberSecBulletin

Incomplete Model of Endpoint Features

CWE-437

A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.

We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.5.

Latest Incomplete Model of Endpoint Features vulnerabilities

  • 7.6 High severity

    White-jotter: Incomplete Model of Endpoint Features

    CVE-2024-57176Antabot

    An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal and access sensitive endpoints via a crafted URL.

  • 7.5 High severity

    suricata: Interpretation Conflict

    CVE-2024-55629OISF

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data (out of band data) can lead to Suricata analyzing data differently than the applications at t