Incomplete Model of Endpoint Features

Opis

A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.

Skutki

• Integrity, Other

  Unexpected State; Varies by Context

Przykłady podatności

• CVE-2024-55629 network-based IDS does not model how TCP endpoints handle TCP urgent data, allowing attackers to bypass detection

Słabość nadrzędna

• CWE-436 Interpretation Conflict

Kiedy powstaje

• Architecture and Design
• Implementation

Dotyczy

Not Language-Specific

Uwagi

This can be related to interaction errors, although in some cases, one of the endpoints is not performing correctly according to specification.