Lucene search
HistoryJul 27, 2023 - 10:15 p.m.
CVE-2022-43701
weak permission
code execution
installation directory
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
20.0%
When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.
Affected configurations
Node
armarm_compilerRange5.00–5.06
ORarmarm_compilerRange6.00–6.20
ORarmarm_compiler_for_embedded_fusaMatch6.16lts
ORarmarm_compiler_for_functional_safetyMatch6.6
ORarmarm_development_studio
ORarmarm_mobile_studio
ORarmds_development_studioRange5.0.0–5.29.3
ORarmfast_models
ORarmgnu_toolchain
ORarmkeil_mdk
ORarmlinaro_forgeRange<22.1
ORarmmbed_studio
Related
prion
prion
Code injection
2023-07-27 22:15:00
cve
cve
CVE-2022-43701
2023-07-27 22:15:10
cvelist
cvelist
CVE-2022-43701 Insecure directory permissions on installer files
2023-07-27 21:28:08
intel
intel
Arm DS for Intel® SoC FPGA Software Advisory
2024-02-13 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
20.0%
Related for NVD:CVE-2022-43701