CVE-2022-43701: Insecure directory permissions on installer files
When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-43701?
CVE-2022-43701 is a vulnerability that occurs when the installation directory does not have sufficiently restrictive file permissions, allowing an attacker to modify files and execute malicious code.
Which software is affected by CVE-2022-43701?
The Arm Arm Compiler versions 5.00 to 5.06, Arm Arm Compiler versions 6.00 to 6.20, Arm Arm Compiler For Embedded Fusa version 6.16, Arm Arm Compiler For Functional Safety version 6.6, Arm Arm Development Studio, Arm Arm Mobile Studio, Arm Ds Development Studio versions 5.0.0 to 5.29.3, Arm Fast Models, Arm Gnu Toolchain, Arm Keil Mdk, Arm Linaro Forge versions up to 22.1, and Arm Mbed Studio are affected by CVE-2022-43701.
What is the severity of CVE-2022-43701?
CVE-2022-43701 has a severity rating of 7.8 (high).
How does CVE-2022-43701 impact security?
CVE-2022-43701 can allow an attacker to modify files in the installation directory and execute malicious code, potentially compromising the security of the affected software.
How can I mitigate CVE-2022-43701?
To mitigate CVE-2022-43701, ensure that the installation directory has sufficiently restrictive file permissions to prevent unauthorized modification of files.