CVEvulnerability
CVE-2022-43702
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-07-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-276, CWE-284
Description
When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.
Affected configurations
• arm arm compiler (>= 5.00 <= 5.06)
• arm arm compiler (>= 6.00 < 6.18)
• arm arm compiler for embedded fusa 6.16
• arm arm compiler for functional safety (>= 6.6 < 6.6.5)
• arm arm development studio
• arm ds development studio (>= 5.0.0 <= 5.29.3)
• arm fast models
Related
References
- https://developer.arm.com/documentation/ka005596/latest Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html www.intel.com
- https://developer.arm.com/documentation/ka005596/latest Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html www.intel.com