CVE-2022-2484

2023-01-0622:15:09

CWE-1274

[email protected]

web.nvd.nist.gov

nokia

asik airscale

signature check bypass

vulnerability

cve-2022-2484

nvd

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.

Affected configurations

NVD

Node

nokiaasik_airscale_474021a.101_firmwareMatch-

AND

nokiaasik_airscale_474021a.101Match-

CPENameOperatorVersion
nokia:asik_airscale_474021a.101_firmwarenokia asik airscale 474021a.101 firmwareeq-

CPE	Name	Operator	Version
nokia:asik_airscale_474021a.101_firmware	nokia asik airscale 474021a.101 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ASIK AirScale ",
    "vendor": "Nokia",
    "versions": [
      {
        "status": "affected",
        "version": "474021A.101"
      }
    ]
  }
]