Description
A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.
Potential Impact
Integrity, Other
Unexpected State, Varies by Context
Real-World CVE Examples
| CVE ID | Description |
|---|---|
| CVE-2024-55629 | network-based IDS does not model how TCP endpoints handle TCP urgent data, allowing attackers to bypass detection |
Related Weaknesses
Taxonomy Mappings
- PLOVER: — Extra Unhandled Features
Frequently Asked Questions
What is CWE-437?
CWE-437 (Incomplete Model of Endpoint Features) is a software weakness identified by MITRE's Common Weakness Enumeration. It is classified as a Base-level weakness. A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to per...
How can CWE-437 be exploited?
Attackers can exploit CWE-437 (Incomplete Model of Endpoint Features) to unexpected state, varies by context. This weakness is typically introduced during the Architecture and Design, Implementation phase of software development.
How do I prevent CWE-437?
Follow secure coding practices, conduct code reviews, and use automated security testing tools (SAST/DAST) to detect this weakness early in the development lifecycle.
What is the severity of CWE-437?
CWE-437 is classified as a Base-level weakness (Medium abstraction). It has been observed in 1 real-world CVEs.