7.8Alta
CVE-2022-43702
Descripción
When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| arm | arm compiler | 5.00 – ≤ 5.06 | |
| arm | arm compiler for embedded fusa | 6.16 | |
| arm | arm compiler for functional safety | 6.6 – < 6.6.5 | |
| arm | arm development studio | — | |
| arm | ds development studio | 5.0.0 – ≤ 5.29.3 | |
| arm | fast models | — |
Referencias y parches
Coincidencias CPE (NVD) (7)
cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:*≥ 5.00 ≤ 5.06cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:*≥ 6.00 < 6.18cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.16:*:*:*:lts:*:*:*cpe:2.3:a:arm:arm_compiler_for_functional_safety:*:*:*:*:*:*:*:*≥ 6.6 < 6.6.5cpe:2.3:a:arm:arm_development_studio:*:*:*:*:*:*:*:*cpe:2.3:a:arm:ds_development_studio:*:*:*:*:*:*:*:*≥ 5.0.0 ≤ 5.29.3cpe:2.3:a:arm:fast_models:*:*:*:*:*:*:*:*