[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fITHyEFpq3fMUuYw9D2HBp_gtqQzoTuhRDsA7wf6PpWU":3,"g5a-risk:CVE-2022-43702":147},{"success":4,"data":5,"meta":144},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":54,"references":55,"referencesCount":69,"weaknesses":70,"weaknessesCount":86,"isActivelyExploited":87,"cisaInfo":26,"otxData":26,"relatedBlogPosts":88,"seoMetadata":89,"configurations":114,"relatedVendorCves":142,"notableEvents":143},"CVE-2022-43702","What is CVE-2022-43702?","When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.","When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to exe...","2023-07-27T22:15:12.697","2025-02-13T17:15:46.377",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,0.00169,[29,29,29,29,29,29,29],"High",[33,38,42,45,48,51],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"arm","arm_compiler","*","cpe:2.3:a:arm:arm_compiler:*:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":40,"criteria":41,"vulnerable":4},"arm_compiler_for_embedded_fusa","6.16","cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.16:*:*:*:lts:*:*:*",{"vendor":34,"product":43,"version":36,"criteria":44,"vulnerable":4},"arm_compiler_for_functional_safety","cpe:2.3:a:arm:arm_compiler_for_functional_safety:*:*:*:*:*:*:*:*",{"vendor":34,"product":46,"version":36,"criteria":47,"vulnerable":4},"arm_development_studio","cpe:2.3:a:arm:arm_development_studio:*:*:*:*:*:*:*:*",{"vendor":34,"product":49,"version":36,"criteria":50,"vulnerable":4},"ds_development_studio","cpe:2.3:a:arm:ds_development_studio:*:*:*:*:*:*:*:*",{"vendor":34,"product":52,"version":36,"criteria":53,"vulnerable":4},"fast_models","cpe:2.3:a:arm:fast_models:*:*:*:*:*:*:*:*",6,[56,61,65,67],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fdeveloper.arm.com\u002Fdocumentation\u002Fka005596\u002Flatest","Arm",[60],"Vendor Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.intel.com\u002Fcontent\u002Fwww\u002Fus\u002Fen\u002Fsecurity-center\u002Fadvisory\u002Fintel-sa-00930.html","Intel",[],{"url":57,"source":58,"tags":66},[60],{"url":62,"source":63,"tags":68},[],4,[71,79],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":78},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar",2,false,[],{"title":90,"metaDescription":91,"keywords":92,"canonicalUrl":93,"structuredData":94},"What is CVE-2022-43702? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-43702, a high severity cyber security vulnerability from 2023. When the directory containing the installer does not have s...","CVE-2022-43702, CVE-2022-43702 vulnerability, CVE-2022-43702 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, arm security, arm_compiler vulnerability, arm_compiler_for_embedded_fusa vulnerability, arm_compiler_for_functional_safety vulnerability, arm_development_studio vulnerability, ds_development_studio vulnerability","\u002Fwhat-is\u002Fcve-2022-43702",{"@context":95,"@type":96,"headline":90,"description":91,"datePublished":10,"dateModified":11,"author":97,"publisher":101,"about":105,"mainEntityOfPage":109,"articleSection":112,"keywords":113},"https:\u002F\u002Fschema.org","TechArticle",{"@type":98,"name":99,"url":100},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":98,"name":99,"url":100,"logo":102},{"@type":103,"url":104},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":106,"name":6,"description":107,"additionalType":108},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":110,"@id":111},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-43702","Cybersecurity","CVE-2022-43702, CVE-2022-43702 vulnerability, CVE-2022-43702 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[115],{"Operator":26,"Negate":26,"Nodes":116},[117],{"Operator":118,"Negate":26,"CPEMatch":119},"OR",[120,124,128,130,134,136,140],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":122,"VersionEndExcluding":26,"VersionEndIncluding":123},"BA7346D6-D534-4BE5-A743-299C0D492C5A","5.00","5.06",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":126,"VersionEndExcluding":127,"VersionEndIncluding":26},"90538D6A-96EF-462E-82A3-881DF353280D","6.00","6.18",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"27EF772A-BF7D-487A-9B34-6521220068F0",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"8ECE6F2E-8B8E-46C2-B749-40C1337599E9","6.6","6.6.5",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"241064F9-9B76-41FA-A8B5-4FBCDE51BAD2",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":138,"VersionEndExcluding":26,"VersionEndIncluding":139},"30B049E4-59A7-47D8-A491-D947C4AAD4AC","5.0.0","5.29.3",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":141,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"402695FC-FB49-4279-ADDD-1DD6F7B6D19B",[],[],{"lastModified":11,"cacheTime":145,"version":146},1792269091525,"2.0",{"score":148,"band":149,"action":150,"scoredAt":151},46,"Medium","Plan remediation","2026-10-16T06:58:43.05003+00:00"]