ZeroHour

CVE-2022-2483

CVSS 3.1
7.1 high
EPSS
<1%p12
Published
()
Modified
Description

The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.

Vendors
nokia
Products
asik airscale 474021a.102 firmware, asik airscale 474021a.101 firmware
Weakness
CWE-1282
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

In the news