PT-2023-12768 · Nokia · Nokia Asik Airscale System Module

Joel Cretan · Publicado 2023-01-06 · Atualizado 2023-01-13 · CVE-2022-2484

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nokia ASIK AirScale system module version 474021A.101

Description The signature check in the Nokia ASIK AirScale system module can be bypassed, allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.

Recommendations For version 474021A.101, consider disabling the ability to run modified firmware until a patch is available. Restrict access to the system module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-1274

Identificadores relacionados

CVE-2022-2484

Produtos afetados

Nokia Asik Airscale System Module

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-2484 · Nota de Segurança
• https://t.me/cvenotify/41882 · Publicação no Telegram
• https://cisa.gov/uscert/ics/advisories/icsa-22-307-02 · Nota
• https://t.me/cibsecurity/56075 · Publicação no Telegram
• https://t.me/cvenotify/41459 · Publicação no Telegram