CVE-2022-2483
Quick assessment
Affected
Nokia ASIK AirScale
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Nokia ASIK AirScale 5G Common System Module是芬兰诺基亚（Nokia）公司的一个通用系统单元。 Nokia ASIK AirScale 5G Common System Module 474021A.101和474021A.102版本存在安全漏洞，该漏洞源于其引导加载程序加载用于固件验证签名的公钥。如果攻击者修改flash内容以损坏密钥，则安全引导可能会在给定设备上永久禁用。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-2483
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1282
Source: CVE Program / CVE List V5
Vulnerability Title
Nokia ASIK AirScale 5G Common System Module 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nokia ASIK AirScale 5G Common System Module是芬兰诺基亚（Nokia）公司的一个通用系统单元。 Nokia ASIK AirScale 5G Common System Module 474021A.101和474021A.102版本存在安全漏洞，该漏洞源于其引导加载程序加载用于固件验证签名的公钥。如果攻击者修改flash内容以损坏密钥，则安全引导可能会在给定设备上永久禁用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Nokia | ASIK AirScale | 474021A.101 | - |
|
II. Public POCs for CVE-2022-2483
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-2483
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-2483 (1)
-
https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02 government-resource
Same Patch Batch · Nokia · 2023-01-06 · 3 CVEs total
| CVE-2022-2482 | 8.4 HIGH | Nokia ASIK AirScale 5G Common System Module 安全漏洞 |
| CVE-2022-2484 | 8.4 HIGH | Nokia ASIK AirScale 5G Common System Module 安全漏洞 |
IV. Related Vulnerabilities
Same vendor: Nokia
-
CVE-2026-40465
An Open Re-direct Vulnerability in Nokia NSP -
CVE-2026-40464
A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia N -
CVE-2026-40463
An Insufficient Role-based Access Control Vulnerability in W -
CVE-2025-7406
A Sudo Privilege Escalation Vulnerability in Nokia MantaRay -
CVE-2025-24816
An Improper Access Control vulnerability in Nokia MantaRay N
Same weakness: CWE-1282
-
CVE-2018-25229
BulletProof FTP Server 2019.0.0.50 Denial of Service via SMT -
CVE-2019-25590
Axessh 4.2 Denial of Service via Log File Name -
CVE-2019-25588
BulletProof FTP Server 2019.0.0.50 Denial of Service via DNS -
CVE-2019-25587
BulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Se -
CVE-2019-25583
RarmaRadio 2.72.3 Username Field Denial of Service
V. Comments for CVE-2022-2483
No comments yet