CWE-1297
Unprotected Confidential Information on Device is Accessible by OSAT Vendors
The product does not adequately protect confidential information on the device from being accessed by Outsourced Semiconductor Assembly and Test (OSAT) vendors.
Impactr finds and proves whether CWE-1297 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.