Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-2483

The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.

Published

2023-01-06T22:15:09.167

Last Modified

2024-11-21T07:01:05.267

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.4 (HIGH)

Weaknesses
  • Type: Primary
    CWE-1282
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System nokia asik_airscale_474021a.102_firmware - Yes
Hardware nokia asik_airscale_474021a.102 - No
Operating System nokia asik_airscale_474021a.101_firmware - Yes
Hardware nokia asik_airscale_474021a.101 - No
References