7.8Hoch

CVE-2022-43702

arm arm compiler; arm arm compiler for embedded fusa; arm arm compiler for functional safety; arm arm development studio Veröffentlicht: (vor 3 Jahren)

Beschreibung

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.

Schwachstellentyp (CWE): CWE-284CWE-276

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
arm arm compiler 5.00 – ≤ 5.06
arm arm compiler for embedded fusa 6.16
arm arm compiler for functional safety 6.6 – < 6.6.5
arm arm development studio —
arm ds development studio 5.0.0 – ≤ 5.29.3
arm fast models —

Referenzen und Patches

CPE-Treffer (NVD) (7)

  • cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:* ≥ 5.00 ≤ 5.06
  • cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:* ≥ 6.00 < 6.18
  • cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.16:*:*:*:lts:*:*:*
  • cpe:2.3:a:arm:arm_compiler_for_functional_safety:*:*:*:*:*:*:*:* ≥ 6.6 < 6.6.5
  • cpe:2.3:a:arm:arm_development_studio:*:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:ds_development_studio:*:*:*:*:*:*:*:* ≥ 5.0.0 ≤ 5.29.3
  • cpe:2.3:a:arm:fast_models:*:*:*:*:*:*:*:*