CWE-1274
Improper Access Control for Volatile Memory Containing Boot Code
The product conducts a secure-boot process that transfers bootloader code from Non-Volatile Memory (NVM) into Volatile Memory (VM), but it does not have sufficient access control or other protections for the Volatile Memory.
Impactr finds and proves whether CWE-1274 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.