7.8High
CVE-2022-43701
Description
When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.
Weakness (CWE):
CWE-276
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| arm | arm compiler | 5.00 – ≤ 5.06 | |
| arm | arm compiler for embedded fusa | 6.16 | |
| arm | arm compiler for functional safety | 6.6 | |
| arm | arm development studio | — | |
| arm | arm mobile studio | — | |
| arm | ds development studio | 5.0.0 – ≤ 5.29.3 | |
| arm | fast models | — | |
| arm | gnu toolchain | — | |
| arm | keil mdk | — | |
| arm | linaro forge | < 22.1 | |
| arm | mbed studio | — |
References and patches
CPE matches (NVD) (12)
cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:*≥ 5.00 ≤ 5.06cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:*≥ 6.00 < 6.20cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.16:*:*:*:lts:*:*:*cpe:2.3:a:arm:arm_compiler_for_functional_safety:6.6:*:*:*:*:*:*:*cpe:2.3:a:arm:arm_development_studio:*:*:*:*:*:*:*:*cpe:2.3:a:arm:arm_mobile_studio:*:*:*:*:*:*:*:*cpe:2.3:a:arm:ds_development_studio:*:*:*:*:*:*:*:*≥ 5.0.0 ≤ 5.29.3cpe:2.3:a:arm:fast_models:*:*:*:*:*:*:*:*cpe:2.3:a:arm:gnu_toolchain:*:*:*:*:*:*:*:*cpe:2.3:a:arm:keil_mdk:*:*:*:*:*:*:*:*cpe:2.3:a:arm:linaro_forge:*:*:*:*:*:*:*:*< 22.1cpe:2.3:a:arm:mbed_studio:*:*:*:*:*:*:*:*