CVE-2022-2483

The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.
References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02 Third Party Advisory US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nokia:asik_airscale_474021a.102_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nokia:asik_airscale_474021a.102:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:nokia:asik_airscale_474021a.101_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nokia:asik_airscale_474021a.101:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:01

Type Values Removed Values Added
References () https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02 - Third Party Advisory, US Government Resource () https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02 - Third Party Advisory, US Government Resource
CVSS v2 : unknown
v3 : 7.1
v2 : unknown
v3 : 8.4

07 Nov 2023, 03:46

Type Values Removed Values Added
Summary The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device. The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.

Information

Published : 2023-01-06 22:15

Updated : 2024-11-21 07:01


NVD link : CVE-2022-2483

Mitre link : CVE-2022-2483

CVE.ORG link : CVE-2022-2483


JSON object : View

Products Affected

nokia

  • asik_airscale_474021a.102_firmware
  • asik_airscale_474021a.102
  • asik_airscale_474021a.101_firmware
  • asik_airscale_474021a.101
CWE
CWE-1282

Assumed-Immutable Data is Stored in Writable Memory