CVE-2022-43701

· HIGHModified

← All CVEs

CVSS v3.1

7.8

EPSS

0.18%

Published

Jul 27, 2023

Modified

Feb 13, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-276CWE-276

Affected Products (12)

arm · arm_compilervulnerable

arm · arm_compiler (up to 6.20)vulnerable

arm · arm_compiler_for_embedded_fusavulnerable

arm · arm_compiler_for_functional_safetyvulnerable

arm · arm_development_studiovulnerable

arm · arm_mobile_studiovulnerable

arm · ds_development_studiovulnerable

arm · fast_modelsvulnerable

arm · gnu_toolchainvulnerable

arm · keil_mdkvulnerable

arm · linaro_forge (up to 22.1)vulnerable

arm · mbed_studiovulnerable

References (4)

https://developer.arm.com/documentation/ka005596/latest

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html

https://developer.arm.com/documentation/ka005596/latest

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html

KEV Catalog EPSS Scores Vendors All CVEs