Description
A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file system accessible from Linux. A script placed in the appropriate place could allow for arbitrary code execution in the bootloader.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nokia | ASIK AirScale | 474021A.101, 474021A.102 | — |
Advisories 1
- ICSA-22-307-02 Nokia ASIK AirScale System Module CISA ICS & IT advisories · Nov 3, 2022
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-02 government-resource