CWE-1256
Improper Restriction of Software Interfaces to Hardware Features
The product provides software-controllable device functionality for capabilities such as power and clock management, but it does not properly limit functionality that can lead to modification of hardware memory or register bits, or the ability to observe physical side channels.
Impactr finds and proves whether CWE-1256 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.