CVE-2022-2484

Published: Jan 6, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.

Affected (1)

Products: Nokia: Asik Airscale 474021a.101 Firmware

Nokia

1 product

Asik Airscale 474021a.101 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nokia Asik Airscale 474021a.101 Firmware	All versions

Running on/with	Platform Versions
Nokia Asik Airscale 474021a.101	All versions

Related CWEs

CWE-1274

Improper Access Control for Volatile Memory Containing Boot Code

The product conducts a secure-boot process that transfers bootloader code from Non-Volatile Memory (NVM) into Volatile Memory (VM), but it does not have sufficient access control or other protections for the Volatile Memory.

References (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.