CWE-436

Class Abstraction Level
Pillar — Highest-level weakness category
Class — Abstract, language-independent
Base — Specific enough to detect
Variant — Tied to specific technology
Compound — Requires multiple weaknesses Incomplete MITRE CWE Status
Stable — Fully reviewed and complete
Draft — Under development, may change
Incomplete — Partially defined by MITRE
Deprecated — No longer recommended
Obsolete — Replaced by another CWE
Interpretation Conflict

Description

Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

This is generally found in proxies, firewalls, anti-virus software, and other intermediary devices that monitor, allow, deny, or modify traffic based on how the client or server is expected to behave.

Top Monitored CVEs

CVE-2021-28474
HIGH
8.8 50.6%
2021-05-11
CVE-2025-48384
HIGH KEV
8.0 2.8%
2025-07-08
CVE-2023-24813
CRITICAL
9.8 2.5%
2023-02-07

Consequences

Integrity, Other — Unexpected State, Varies by Context