CVEvulnerability
CVE-2022-2484
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-01-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-1274
Description
The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.
Affected configurations
• nokia asik airscale 474021a.101 firmware
Related
Weakness · CWE (1)
- CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code weakness
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02 Third Party Advisory, US Government Resource
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02 Third Party Advisory, US Government Resource