CVE-2022-2483
- State
- Published
- Severity
- 8.4 High
- Published
- Jan 6, 2023
- Updated
- Jan 16, 2025
- Reserved
- Jul 19, 2022
Description
The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.4 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H | icscert |
Weaknesses
- CWE-1282 Assumed-Immutable Data is Stored in Writable Memory
Affected Products
| Product | Versions |
|---|---|
ASIK AirScaleNokia |
|
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.