PT-2023-12768 · Nokia · Nokia Asik Airscale System Module

Joel Cretan · Published 2023-01-06 · Updated 2023-01-13 · CVE-2022-2484

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nokia ASIK AirScale system module version 474021A.101

Description The signature check in the Nokia ASIK AirScale system module can be bypassed, allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs.

Recommendations For version 474021A.101, consider disabling the ability to run modified firmware until a patch is available. Restrict access to the system module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1274

Related Identifiers

CVE-2022-2484

Affected Products

Nokia Asik Airscale System Module

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-2484 · Security Note
• https://t.me/cvenotify/41882 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-307-02 · Note
• https://t.me/cibsecurity/56075 · Telegram Post
• https://t.me/cvenotify/41459 · Telegram Post