CVE-2022-43703

HIGH

7.8

Descricao

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.

Detalhes CVE

Pontuacao CVSS v3.17.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado7/27/2023

Ultima modificacao2/13/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

arm:arm_development_studioarm:ds_development_studio

Fraquezas (CWE)

CWE-427CWE-427

Referencias

https://developer.arm.com/documentation/ka005596/latest(arm-security@arm.com)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html(arm-security@arm.com)

https://developer.arm.com/documentation/ka005596/latest(af854a3a-2127-422b-91ae-364da2661108)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.