ICSA-22-307-02

icsaUScisa_csaf_ot

Nokia ASIK AirScale System Module

view advisory published 2022-11-03

Successful exploitation of these vulnerabilities could result in the execution of a malicious kernel, running of arbitrary malicious programs, or running of modified Nokia programs.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2022-2484UShigh7.8—
The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the executio…
CVE-2022-2483UShigh7.1—
The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the f…
CVE-2022-2482UShigh8.8—
A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file system accessible f…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • MitigationASIK AirScale 5G Common System Module

    Nokia has released technical support notes containing mitigation instructions for impacted Nokia users. Users should contact Nokia to receive further information.

    https://customer.nokia.com/support/s/
  • MitigationASIK AirScale 5G Common System Module

    Nokia has released technical support notes containing mitigation instructions for impacted Nokia users. Users should contact Nokia to receive further information.

    https://customer.nokia.com/support/s/
  • MitigationASIK AirScale 5G Common System Module

    Nokia has released technical support notes containing mitigation instructions for impacted Nokia users. Users should contact Nokia to receive further information.

    https://customer.nokia.com/support/s/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan