CWE-782
Exposed IOCTL with Insufficient Access Control
The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.
Impactr finds and proves whether CWE-782 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.