CWE-1222
Insufficient Granularity of Address Regions Protected by Register Locks
The product defines a large address region protected from modification by the same register lock control bit. This results in a conflict between the functional requirement that some addresses need to be writable by software during operation and the security requirement that the system configuration lock bit must be se…
Impactr finds and proves whether CWE-1222 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.