CVE-2022-2484
- State
- Published
- Severity
- 8.4 High
- Published
- Jan 6, 2023
- Updated
- Jan 16, 2025
- Reserved
- Jul 19, 2022
Description
The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.4 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H | icscert |
Weaknesses
- CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code
Affected Products
| Product | Versions |
|---|---|
ASIK AirScaleNokia |
|
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.