CVE-2022-21168: ICSA-22-090-03 Fuji Electric Alpha5
Published Apr 12, 2022
·Updated
The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure.
Affected Software
3 affected componentsFixes available
Fuji Electric Alpha5<4.3
4.3
Fujielectric Alpha5 Smart Loader Firmware<4.3
Fujielectric Alpha5 Smart Loader
Remediation
Patch Available
Information
Fuji Electric recommends upgrading to Alpha5 v4.4. The files can be obtained in the Fuji Library.
Event History
Apr 12, 2022
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-21168?
CVE-2022-21168 is a vulnerability caused by an invalid pointer initialization in the affected product, which could result in information disclosure.
2
How severe is CVE-2022-21168?
CVE-2022-21168 has a severity rating of medium with a CVSS score of 5.5.
3
Which software is affected by CVE-2022-21168?
The affected software is Fuji Electric Alpha5 with firmware version up to 4.3.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-21168?
The CWE ID for CVE-2022-21168 is CWE-824.
5
How can I fix CVE-2022-21168?
To fix CVE-2022-21168, update the affected Fuji Electric Alpha5 firmware to a version higher than 4.3.