When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.
References
Configurations
Configuration 1 (hide)
|
History
13 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code. |
21 Nov 2024, 07:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://developer.arm.com/documentation/ka005596/latest - Vendor Advisory | |
| References | () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html - |
13 Feb 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Aug 2023, 19:34
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://developer.arm.com/documentation/ka005596/latest - Vendor Advisory | |
| CWE | CWE-276 | |
| CPE | cpe:2.3:a:arm:arm_compiler_for_functional_safety:*:*:*:*:*:*:*:* cpe:2.3:a:arm:ds_development_studio:*:*:*:*:*:*:*:* cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.16:*:*:*:lts:*:*:* cpe:2.3:a:arm:fast_models:*:*:*:*:*:*:*:* cpe:2.3:a:arm:arm_development_studio:*:*:*:*:*:*:*:* cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:* |
27 Jul 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-27 22:15
Updated : 2025-02-13 17:15
NVD link : CVE-2022-43702
Mitre link : CVE-2022-43702
CVE.ORG link : CVE-2022-43702
JSON object : View
Products Affected
arm
- arm_development_studio
- fast_models
- arm_compiler_for_functional_safety
- arm_compiler_for_embedded_fusa
- arm_compiler
- ds_development_studio