CVE-2022-43702

· HIGHModified

← All CVEs

CVSS v3.1

7.8

EPSS

0.17%

Published

Jul 27, 2023

Modified

Feb 13, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-284CWE-276

Affected Products (7)

arm · arm_compilervulnerable

arm · arm_compiler (up to 6.18)vulnerable

arm · arm_compiler_for_embedded_fusavulnerable

arm · arm_compiler_for_functional_safety (up to 6.6.5)vulnerable

arm · arm_development_studiovulnerable

arm · ds_development_studiovulnerable

arm · fast_modelsvulnerable

References (4)

https://developer.arm.com/documentation/ka005596/latest

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html

https://developer.arm.com/documentation/ka005596/latest

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html

KEV Catalog EPSS Scores Vendors All CVEs