CyberRota Analysis
AI-GeneratedEclipse Embedded CDT versions 6.0 to 6.7 are vulnerable to a critical issue where the extraction of a compromised CMSIS-Pack archive can lead to arbitrary file writing outside of the intended directory. This flaw poses a significant risk, as it could allow attackers to manipulate files on the disk, potentially leading to system compromise. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk.