7.8
CVE-2022-43701
- EPSS 0.06%
- Veröffentlicht 27.07.2023 22:15:10
- Zuletzt bearbeitet 13.02.2025 17:15:46
- Quelle arm-security@arm.com
- CVE-Watchlists
- Unerledigt
LoginInsecure directory permissions on installer files
When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arm ≫ Arm Compiler Version >= 5.00 <= 5.06
Arm ≫ Arm Compiler Version >= 6.00 < 6.20
Arm ≫ Arm Compiler For Embedded Fusa Version6.16 SwEditionlts
Arm ≫ Arm Compiler For Functional Safety Version6.6
Arm ≫ Ds Development Studio Version >= 5.0.0 <= 5.29.3
Arm ≫ Linaro Forge Version < 22.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.194 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-276 Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.