Vulnerability · Published Aug 31, 2022 · Assigned by icscert
CVE-2022-1888Fuji Electric Alpha7 PC Loader Fuji Electric Alpha7 PC Loader
High 7.8
In plain English
A high-severity stack buffer overflow in Alpha7 PC Loader from Fuji Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 80.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Alpha7 PC Loader (All versions) is vulnerable to a stack-based buffer overflow while processing a specifically crafted project file, which may allow an attacker to execute arbitrary code.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fuji Electric | Alpha7 PC Loader | All Versions |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-151-01 x_refsource_MISC