CWE-1259
Improper Restriction of Security Token Assignment
The System-On-A-Chip (SoC) implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Tokens are improperly protected.
Impactr finds and proves whether CWE-1259 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.