CVE-2022-43702
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
41/100
Published: 2023-07-27
Modified: 2026-11-10
First seen: 2026-11-10
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| arm | arm_compiler | 5.00 – 5.06 |
| arm | arm_compiler_for_embedded_fusa | 6.16 |
| arm | arm_compiler_for_functional_safety | 6.6 – 6.6.5 |
| arm | arm_development_studio | * |
| arm | ds_development_studio | 5.0.0 – 5.29.3 |
| arm | fast_models | * |
References & Advisories (2)
Vendor Advisory