CVE-2022-2483

2023-01-0622:15:09

CWE-1282

[email protected]

web.nvd.nist.gov

cve-2022-2483

nokia

asik airscale

bootloader

firmware verification

secure boot

vulnerability

nvd

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

6.8 Medium

AI Score

Confidence

High

JSON

The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.

CPE configuration

NVD

nokiaasik_airscale_474021a.102_firmwareMatch-

AND

nokiaasik_airscale_474021a.102Match-

CPENameOperatorVersion
nokia:asik_airscale_474021a.102_firmwarenokia asik airscale 474021a.102 firmwareeq-
nokia:asik_airscale_474021a.101_firmwarenokia asik airscale 474021a.101 firmwareeq-

CPE	Name	Operator	Version
nokia:asik_airscale_474021a.102_firmware	nokia asik airscale 474021a.102 firmware	eq	-
nokia:asik_airscale_474021a.101_firmware	nokia asik airscale 474021a.101 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ASIK AirScale ",
    "vendor": "Nokia",
    "versions": [
      {
        "status": "affected",
        "version": "474021A.101"
      },
      {
        "status": "affected",
        "version": "474021A.102"
      }
    ]
  }
]