PT-2023-12768 · Nokia · Nokia Asik Airscale System Module

·

CVE-2022-2484

·

Published

2023-01-06

·

Updated

2023-01-13

CVSS v3.1

8.4

High

VectorAV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Nokia ASIK AirScale system module version 474021A.101
Description The signature check in the Nokia ASIK AirScale system module can be bypassed, allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.
Recommendations For version 474021A.101, consider disabling the ability to run modified firmware until a patch is available. Restrict access to the system module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2022-2484

Affected Products

Nokia Asik Airscale System Module