ICSA-22-307-02

icsaUScisa_csaf_ot

Nokia ASIK AirScale System Module

Advisory ansehen veröffentlicht 2022-11-03

Successful exploitation of these vulnerabilities could result in the execution of a malicious kernel, running of arbitrary malicious programs, or running of modified Nokia programs.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-2484UShigh7.8—
The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the executio…
CVE-2022-2483UShigh7.1—
The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the f…
CVE-2022-2482UShigh8.8—
A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file system accessible f…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (3)

  • MitigationASIK AirScale 5G Common System Module

    Nokia has released technical support notes containing mitigation instructions for impacted Nokia users. Users should contact Nokia to receive further information.

    https://customer.nokia.com/support/s/
  • MitigationASIK AirScale 5G Common System Module

    Nokia has released technical support notes containing mitigation instructions for impacted Nokia users. Users should contact Nokia to receive further information.

    https://customer.nokia.com/support/s/
  • MitigationASIK AirScale 5G Common System Module

    Nokia has released technical support notes containing mitigation instructions for impacted Nokia users. Users should contact Nokia to receive further information.

    https://customer.nokia.com/support/s/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan