{"id":"CVE-2022-2483","state":"PUBLISHED","title":"CVE-2022-2483","description":"\nThe bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.\n\n","publishedAt":"2023-01-06T21:04:52.603Z","updatedAt":"2025-01-16T22:03:03.157Z","severity":{"score":8.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","source":"icscert"},"assigner":"icscert","products":["Nokia ASIK AirScale "],"affected":[{"vendor":"Nokia","product":"ASIK AirScale ","defaultStatus":"unaffected","versions":[{"version":"474021A.101","status":"affected"},{"version":"474021A.102","status":"affected"}]}],"references":["https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02"],"weaknesses":["CWE-1282"],"ingestedAt":"2026-10-29T19:50:01.354Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/2xxx/CVE-2022-2483.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-2483","state":"PUBLISHED","datePublished":"2023-01-06T21:04:52.603Z","dateUpdated":"2025-01-16T22:03:03.157Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2022-07-19T21:41:25.647Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"\nThe bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.\n\n"}],"affected":[{"vendor":"Nokia","product":"ASIK AirScale ","defaultStatus":"unaffected","versions":[{"version":"474021A.101","status":"affected"},{"version":"474021A.102","status":"affected"}]}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02","tags":["government-resource"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1282","description":"CWE-1282 Assumed-Immutable Data is Stored in Writable Memory","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2023-01-06T21:04:52.603Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Joel Cretan"},{"lang":"en","type":"reporter","user":"00000000-0000-4000-9000-000000000000","value":"Red Balloon Security"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"\n\n<p>Nokia has released technical support notes containing mitigation instructions for impacted Nokia users. Users should <a target=\"_blank\" rel=\"nofollow\" href=\"https://customer.nokia.com/support/s/\">contact Nokia</a>&nbsp;to receive further information.</p>"}],"value":"\nNokia has released technical support notes containing mitigation instructions for impacted Nokia users. Users should  contact Nokia https://customer.nokia.com/support/s/  to receive further information.\n\n"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02","tags":["government-resource","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T00:39:07.993Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-16T20:22:43.146201Z","id":"CVE-2022-2483","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-16T22:03:03.157Z"}}]}}}