Lucene search

[email protected]CVE-2022-2482

HistoryJan 06, 2023 - 10:15 p.m.

CVE-2022-2482

2023-01-0622:15:09

CWE-1274

[email protected]

web.nvd.nist.gov

cve-2022-2482

nokia

asik airscale

vulnerability

arbitrary code execution

bootloader

nvd

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file system accessible from Linux. A script placed in the appropriate place could allow for arbitrary code execution in the bootloader.

Affected configurations

NVD

Node

nokiaasik_airscale_474021a.102_firmwareMatch-

AND

nokiaasik_airscale_474021a.102Match-

Node

nokiaasik_airscale_474021a.101_firmwareMatch-

AND

nokiaasik_airscale_474021a.101Match-

CPENameOperatorVersion
nokia:asik_airscale_474021a.102_firmwarenokia asik airscale 474021a.102 firmwareeq-

CPE	Name	Operator	Version
nokia:asik_airscale_474021a.102_firmware	nokia asik airscale 474021a.102 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ASIK AirScale ",
    "vendor": "Nokia",
    "versions": [
      {
        "status": "affected",
        "version": "474021A.101"
      },
      {
        "status": "affected",
        "version": "474021A.102"
      }
    ]
  }
]