CVE-2022-43701

Published: Jul 27, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.

Affected (12)

Products: Arm: Arm Compiler, Arm Compiler For Embedded Fusa, Arm Compiler For Functional Safety, Arm Development Studio, Arm Mobile Studio, Ds Development Studio, Fast Models, Gnu Toolchain, Keil Mdk, Linaro Forge, Mbed Studio

Arm

11 products

Arm Compiler

Arm Compiler For Embedded Fusa

Arm Compiler For Functional Safety

Arm Development Studio

Arm Mobile Studio

Ds Development Studio

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Arm Arm Compiler	5.00 ≤ version ≤ 5.06
Arm Arm Compiler	6.00 ≤ version < 6.20
Arm Arm Compiler For Embedded Fusa	Version 6.16
Arm Arm Compiler For Functional Safety	Version 6.6
Arm Arm Development Studio	All versions
Arm Arm Mobile Studio	All versions
Arm Ds Development Studio	5.0.0 ≤ version ≤ 5.29.3
Arm Fast Models	All versions
Arm Gnu Toolchain	All versions
Arm Keil Mdk	All versions
Arm Linaro Forge	version < 22.1
Arm Mbed Studio	All versions

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (4)

https://developer.arm.com/documentation/ka005596/latest

Source: arm-security@arm.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html

Source: arm-security@arm.com

https://developer.arm.com/documentation/ka005596/latest

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.