← Back
CWE-239

3 CVEs • Abstraction: Variant

Failure to Handle Incomplete Element

The product does not properly handle when a particular element is not completely specified.

JSON object

Loading...

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
-
-
Jun 17, 2026
Oct 22, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.
-
-
Jun 17, 2026
Oct 16, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNo...Show more
On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.Show less
3Easyrobotics
Mobile Industrial RobotsUvd Robots
10Er Flex Firmware
Er Lite FirmwareEr One Firmware+7 more
Jun 17, 2026
Jun 24, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.