CWE-207Variant

Observable Behavioral Discrepancy With Equivalent Products

Draft in the CWE catalog · 1 CVE mapped

1
CVEs mapped
4.3
Median CVSS
What it is

The product operates in an environment in which its existence or specific identity should not be known, but it behaves differently than other products with equivalent functionality, in a way that is observable to an attacker.

Recent examples
4.3cvss
CVE-2025-41657

AUMA: Incorrect delivery status of the Bluetooth configuration

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-207
Abstraction
Variant
Structure
Simple
Status
Draft