7.8High
CVE-2022-43702
Description
When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| arm | arm compiler | 5.00 – ≤ 5.06 | |
| arm | arm compiler for embedded fusa | 6.16 | |
| arm | arm compiler for functional safety | 6.6 – < 6.6.5 | |
| arm | arm development studio | — | |
| arm | ds development studio | 5.0.0 – ≤ 5.29.3 | |
| arm | fast models | — |
References and patches
CPE matches (NVD) (7)
cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:*≥ 5.00 ≤ 5.06cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:*≥ 6.00 < 6.18cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.16:*:*:*:lts:*:*:*cpe:2.3:a:arm:arm_compiler_for_functional_safety:*:*:*:*:*:*:*:*≥ 6.6 < 6.6.5cpe:2.3:a:arm:arm_development_studio:*:*:*:*:*:*:*:*cpe:2.3:a:arm:ds_development_studio:*:*:*:*:*:*:*:*≥ 5.0.0 ≤ 5.29.3cpe:2.3:a:arm:fast_models:*:*:*:*:*:*:*:*