CyberSecBulletin

Failure to Handle Missing Parameter

CWE-234

If too few arguments are sent to a function, the function will still pop the expected number of arguments from the stack. Potentially, a variable number of arguments could be exhausted in a function as well.

We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 8.6.

How this weakness is prevented

  • Build and Compilation: This issue can be simply combated with the use of proper build process.
  • Implementation: Forward declare all functions. This is the recommended solution. Properly forward declaration of all used functions will result in a compiler error if too few arguments are sent to a function.

Latest Failure to Handle Missing Parameter vulnerabilities

  • 8.6 High severity

    Cisco Meraki MX Firmware: Failure to Handle Missing Parameter

    CVE-2022-20933CiscoEPSS 1.15%

    A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due t