stateful session weakness

Which feature is a potential security weakness of a traditional stateful firewall?