Insecure directory permissions on installer files
CVE-2022-43701
Key Information:
- Vendor
Arm
- Vendor
- CVE Published:
- 27 July 2023
What is CVE-2022-43701?
This vulnerability affects products from Arm and Intel where insufficient restrictions in the installation directory's file permissions allow attackers to modify files. Consequently, this could lead to the execution of unauthorized and potentially malicious code. It is crucial for users to ensure that file permissions are configured correctly to mitigate such risks and protect their systems from exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Arm Compiler 5 (AC5), Arm Compiler for Embedded 6 (AC6), Fast Models (FM), Arm Compiler for Embedded FuSA (ACEF), Arm Development Studio (ADS), Arm Forge (AF), Arm Mobile Studio (AMS), DS-5 Development Studio, Fast Models (FM), GNU Toolchain (GT), Keil MDK (KMDK), Mbed Studio (MS) AC5 All Releases, AC6 Releases prior to 6.20, ACEF All Releases, ADS All Releases, AF Releases prior to 22.1, AMS All releases, DS5 All Releases, FM All Releases, GT All Releases, KMDK All Releases, MS All Releases
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved