PT-2022-14897 · Fuji Electric · Fuji Electric Alpha5 C5V

Published 2022-02-22 · Updated 2022-04-21 · CVE-2022-21168

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fuji Electric Alpha5 C5V (affected versions not specified)

Description The issue is caused by an invalid pointer initialization, potentially leading to information disclosure. There is no information available about the estimated number of affected devices or real-world incidents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

CVE-2022-21168

ZDI-22-387

Affected Products

Fuji Electric Alpha5 C5V

References · 5

• https://zerodayinitiative.com/advisories/ZDI-22-387 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21168 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-090-03 · Patch
• https://osv.dev/vulnerability/CVE-2022-21168 · Vendor Advisory
• https://t.me/cibsecurity/40639 · Telegram Post