CVE-2022-2484CWE-1274

The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware

High · published January 6, 2023

CVSS v3.1
8.4
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-1274 · Improper Access Control for Volatile Memory Containing Boot Code
Published
2023-01-06T21:05Z
EPSS history
Timeline
  • 06 JAN 21:05Z
    The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware
    cvelistv5