TI-2022-05569 Aliases CVE-2022-21168 GHSA-c3c6-9rx4-pm8q

ICSA-22-090-03 Fuji Electric Alpha5

LOW 26CWE-824Published 2022-04-12 · Updated 2025-04-16

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00725 54th percentileScored 2026-11-07

Fix Fixed Alpha5 (Fuji Electric): 4.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Fuji Electric	Alpha5	All to before 4.3	4.3	Patch available	CNA

Alpha5 VendorFuji Electric Affected All to before 4.3 Fixed in 4.3 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:fujielectric:alpha5_smart_loader_firmware::::::::	before 4.3	Vulnerable	Fuji Electric
cpe:2.3:h:fujielectric:alpha5_smart_loader:-:::::::*	not specified by NVD	Running on	Fuji Electric

cpe:2.3:o:fujielectric:alpha5_smart_loader_firmware:*:*:*:*:*:*:*:* Versions before 4.3 Vulnerable ·Fuji Electric
cpe:2.3:h:fujielectric:alpha5_smart_loader:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fuji Electric

Remediation

Fix · CNA Alpha5 (Fuji Electric) Fixed in 4.3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2022-04-12
Fuji Electric Alpha5 4.3
5 records Highest priority Priority LOW 5 LOW
Other records, highest priority first
- TI-2022-08259 ICSA-22-090-03 Fuji Electric Alpha5Priority LOW 38
- TI-2022-05620 ICSA-22-090-03 Fuji Electric Alpha5Priority LOW 38
- TI-2022-05607 ICSA-22-090-03 Fuji Electric Alpha5Priority LOW 38
Show all 5 records →

Timeline

2026-10-02 Threatist record created from CVE-2022-21168
2026-10-03 Alias added: GHSA-c3c6-9rx4-pm8q

References

Patch 1

https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-03

TI-2018-10624 Heap-based buffer overflow in Fuji Electric Alpha5 Smart Loader CVSS 3.0CRITICAL 9.8
TI-2019-10152 Stack-based buffer overflow in Alpha5 Smart Loader CVSS 3.1HIGH 7.8
TI-2022-08259 ICSA-22-090-03 Fuji Electric Alpha5 CVSS 3.1HIGH 7.8
TI-2022-05620 ICSA-22-090-03 Fuji Electric Alpha5 CVSS 3.1HIGH 7.8
TI-2022-05607 ICSA-22-090-03 Fuji Electric Alpha5 CVSS 3.1HIGH 7.8
TI-2018-10618 Buffer overflow in Fuji Electric Alpha5 Smart Loader CVSS 3.0MEDIUM 5.3

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences