Lucene search

IcscertCVELIST:CVE-2022-2484

HistoryJan 06, 2023 - 9:05 p.m.

CVE-2022-2484

2023-01-0621:05:38

CWE-1274

icscert

www.cve.org

nokia

asik airscale

signature check

bypass

firmware

execution

malicious kernel

arbitrary programs

modified programs

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

Percentile

10.8%

JSON

The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ASIK AirScale ",
    "vendor": "Nokia",
    "versions": [
      {
        "status": "affected",
        "version": "474021A.101"
      }
    ]
  }
]

References

www.cisa.gov/uscert/ics/advisories/icsa-22-307-02

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

Percentile

10.8%

JSON

Related for CVELIST:CVE-2022-2484