CVE-2022-2482: High severity nokia asika airscale vulnerability

Published Jan 6, 2023

Updated

A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file system accessible from Linux. A script placed in the appropriate place could allow for arbitrary code execution in the bootloader.

Affected Software

6 affected components

Nokia ASIK 474021A.101

Nokia ASIK 474021A.102 (not affected by CVE-2022-2484)

Nokia Asik Airscale 474021a.102 Firmware

Nokia Asik Airscale 474021a.102

Nokia Asik Airscale 474021a.101 Firmware

Nokia Asik Airscale 474021a.101

Remediation

Information

Nokia has released technical support notes containing mitigation instructions for impacted Nokia users. Users should contact Nokia https://customer.nokia.com/support/s/ to receive further information.

Event History

Jan 6, 2023

CVE Published

via MITRE·09:03 PM

Data Sourced

via MITRE·09:03 PM

RemedyDescriptionSeverityWeakness

Aug 3, 2024

Data Sourced

via ICS·12:47 AM

SeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

ICSA-22-307-02

Frequently Asked Questions

What is the severity of CVE-2022-2482?

CVE-2022-2482 has a severity rating of 8.8 (high).

What is the affected software for CVE-2022-2482?

The affected software for CVE-2022-2482 includes Nokia Asik Airscale 474021a.101 Firmware and Nokia Asik Airscale 474021a.102 Firmware.

How can an attacker exploit CVE-2022-2482?

An attacker can exploit CVE-2022-2482 by placing a script on the file system accessible from Linux, allowing for arbitrary code execution in the bootloader.

Is Nokia Asik Airscale 474021a.101 vulnerable to CVE-2022-2482?

No, Nokia Asik Airscale 474021a.101 is not vulnerable to CVE-2022-2482.

Is Nokia Asik Airscale 474021a.102 vulnerable to CVE-2022-2482?

Yes, Nokia Asik Airscale 474021a.102 is vulnerable to CVE-2022-2482.