PT-2023-14293 · Arm · Arm Compiler 5 (Ac5)+11

Falconcorruption + 1 · Publicado 2023-07-27 · Atualizado 2024-10-24 · CVE-2022-43701

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description The issue arises when the installation directory lacks sufficiently restrictive file permissions, allowing an attacker to modify files and execute malicious code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2022-43701

Produtos afetados

Arm Compiler 5 (Ac5)

Arm Compiler

Arm Compiler For Embedded Fusa

Arm Compiler For Functional Safety

Arm Development Studio

Arm Mobile Studio

Ds Development Studio

Fast Models

Gnu Toolchain

Keil Mdk

Linaro Forge

Mbed Studio

Referências · 8

• https://osv.dev/vulnerability/CVE-2022-43701 · Aviso do Fabricante
• https://developer.arm.com/documentation/ka005596/latest · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-43701 · Nota de Segurança
• https://t.me/cibsecurity/67353 · Publicação no Telegram
• https://t.me/cvenotify/99404 · Publicação no Telegram
• https://t.me/cvenotify/71315 · Publicação no Telegram
• https://t.me/cvenotify/55367 · Publicação no Telegram