CVE-2022-21228: ICSA-22-090-03 Fuji Electric Alpha5
Published Apr 12, 2022
·Updated
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
Affected Software
3 affected componentsFixes available
Fujielectric Alpha5 Smart Loader Firmware<4.3
Fujielectric Alpha5 Smart Loader
Fuji Electric Alpha5<4.3
4.3
Remediation
Patch Available
Information
Fuji Electric recommends upgrading to Alpha5 v4.4. The files can be obtained in the Fuji Library.
Event History
Apr 12, 2022
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-21228?
CVE-2022-21228 is a vulnerability in the Alpha5 Smart Loader firmware that allows an attacker to execute arbitrary code through a stack-based buffer overflow.
2
What is the severity of CVE-2022-21228?
The severity of CVE-2022-21228 is high, with a CVSS score of 7.8.
3
How does CVE-2022-21228 affect Fuji Electric Alpha5?
CVE-2022-21228 affects Fuji Electric Alpha5 Smart Loader firmware version up to exclusive 4.3, allowing an attacker to execute arbitrary code.
4
Is Fuji Electric Alpha5 Smart Loader vulnerable to CVE-2022-21228?
No, Fuji Electric Alpha5 Smart Loader is not vulnerable to CVE-2022-21228.
5
How can I fix CVE-2022-21228?
To fix CVE-2022-21228, it is recommended to update the Fuji Electric Alpha5 Smart Loader firmware to a version higher than 4.3 or apply the necessary patches provided by the vendor.