CVE-2016-10629

CVE-2016-10629 affects the nw-with-arm installer, which is vulnerable due to its insecure practice of downloading binary resources over HTTP. This allows for Man-in-the-Middle (MITM) attacks where an attacker can swap legitimate binaries with malicious ones. The vulnerability carries a high CVSS score of 8.1, indicating a critical risk with potential for remote code execution (RCE) without user interaction, given a high attack complexity. While the EPSS score is low, suggesting a low probability of exploitation, there is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.