CWE-782: Exposed IOCTL with Insufficient Access Control

The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.

A kind of CWE-749 Exposed Dangerous Method or Function.

From the CWE List. © The MITRE Corporation.