CWE-703

Pillar Abstraction Level
Pillar — Highest-level weakness category
Class — Abstract, language-independent
Base — Specific enough to detect
Variant — Tied to specific technology
Compound — Requires multiple weaknesses Incomplete MITRE CWE Status
Stable — Fully reviewed and complete
Draft — Under development, may change
Incomplete — Partially defined by MITRE
Deprecated — No longer recommended
Obsolete — Replaced by another CWE
Improper Check or Handling of Exceptional Conditions

Description

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

Top Monitored CVEs

CVE-2024-10781
HIGH
8.1 3.8%
2024-11-26
CVE-2021-25370
MEDIUM KEV
4.4 0.9%
2021-03-26
CVE-2021-25372
MEDIUM KEV
6.7 0.9%
2021-03-26

Consequences

Confidentiality, Availability, Integrity — Read Application Data, DoS: Crash, Exit, or Restart, Unexpected State

Detection

Dynamic Analysis with Manual Results Interpretation

According to SOAR [REF-1479], the following detection techniques may be useful: Highly cost effective: Fault Injection - source code Fault Injection - binary Cost effective for partial coverage: Forced Path Execution

Manual Static Analysis - Source Code

According to SOAR [REF-1479], the following detection techniques may be useful: Highly cost effective: Manual Source Code Review (not inspections) Cost effective for partial coverage: Focused Manual Spotcheck - Focused manual analysis of source

Automated Static Analysis - Source Code

According to SOAR [REF-1479], the following detection techniques may be useful: Cost effective for partial coverage: Source code Weakness Analyzer Context-configured Source Code Weakness Analyzer

Architecture or Design Review

According to SOAR [REF-1479], the following detection techniques may be useful: Highly cost effective: Inspection (IEEE 1028 standard) (can apply to requirements, design, source code, etc.) Formal Methods / Correct-By-Construction