VULNERABILITY INTELLIGENCE

CVE-2022-2483

CVSS score8.4 HIGH

EPSS probability0.23%

CISA KEVNot currently listed

Published2023-01-06

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Description

The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.

Weakness classification

CWE-1282: Assumed-Immutable Data is Stored in Writable Memory

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource