Skip to content
Sign in
6.1 Medium

CVE-2022-33322 Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi…

Description

Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

Affected products and versions

Product Affected versions Fixed in
Air Conditioning MSZ-FD40/56/63/71/8022S Versions not published
Air Conditioning MSZ-HXV25/28/40/56/63/71/8022S Versions not published
Air Conditioning MSZ-VXV40/56/63/71/8022S Versions not published
Air Conditioning MSZ-ZD25/28/40/56/63/71/8022(S) Versions not published
Air Conditioning MSZ-FZ40/56/63/71/80/9021S Versions not published
Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9021(S) Versions not published
Air Conditioning MSZ-FZV40/56/63/71/80/9021S Versions not published
Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S) Versions not published
Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9021E9(S) Versions not published
Show the 148 other branches
Product Affected versions Fixed in
Air Conditioning MSZ-FZ40/56/63/71/80/9020S Versions not published
Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S) Versions not published
Air Conditioning MSZ-FZV40/56/63/71/80/9020S Versions not published
Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S) Versions not published
Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9020E8(S) Versions not published
Wi-Fi Interface MAC-900IF Versions not published
Wi-Fi Interface PAC-SK43ML Versions not published
Refrigerator MR-MXD50/57G Versions not published
Refrigerator MR-WXD52/60/70G Versions not published
Refrigerator MR-WZ55/61H Versions not published
Refrigerator MR-MZ54/60H Versions not published
HEMS adapter GT-HEM4 Versions not published
Wi-Fi Interface GT-RA1 Versions not published
Wi-Fi Interface GT-RA2 Versions not published
Wi-Fi Interface GT-HR1 Versions not published
Remote control with Wi-Fi Interface RMCB-H6SE-T Versions not published
Remote control with Wi-Fi Interface RMCB-F6SE-T Versions not published
Remote control with Wi-Fi Interface RMCB-D6SE-T Versions not published
BATHROOM THERMO VENTILATOR V-241BZ-RC Versions not published
BATHROOM THERMO VENTILATOR V-241BZ5-RC Versions not published
BATHROOM THERMO VENTILATOR WD-240DK-RC Versions not published
BATHROOM THERMO VENTILATOR WD-240DK2-RC Versions not published
Rice cooker NJ-AWBX10 Versions not published
Mitsubishi Electric HEMS control adapter P-HM04WA Versions not published
Wi-Fi Interface P-WA01 Versions not published
Energy Recovery Ventilator VL-200ZMHSV3-RC Versions not published
Smart Switch P-1600SWRC Versions not published
Smart Switch P-04SWRC Versions not published
Smart Switch P-10SWRC Versions not published
Wi-Fi Interface MAC-587IF-E Versions not published
Wi-Fi Interface MAC-587IF2-E Versions not published
Wi-Fi Interface MAC-507IF-E Versions not published
Wi-Fi Interface MAC-588IF-E Versions not published
Wi-Fi Interface S-MAC-002IF Versions not published
Air Conditioning MSXY-FP05/07/10/13/18/20/24VGK-SG1 Versions not published
Air Conditioning MSY-GP10/13/15/18/20/24VFK-SG1 Versions not published
Air Conditioning MSZ-AP25/35/42/50VGK-E1 Versions not published
Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-E2 Versions not published
Air Conditioning MSZ-AP25/35/42/50/60/71VGK-E3 Versions not published
Air Conditioning MSZ-AP25/35/42/50VGK-E7 Versions not published
Air Conditioning MSZ-AP25/35/42/50VGK-E8 Versions not published
Air Conditioning MSZ-AP25/35/42/50VGK-EN1 Versions not published
Air Conditioning MSZ-AP25/35/42/50VGK-EN2 Versions not published
Air Conditioning MSZ-AP25/35/42/50VGK-EN3 Versions not published
Air Conditioning MSZ-AP25/35/42/50VGK-ER1 Versions not published
Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ER2 Versions not published
Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ER3 Versions not published
Air Conditioning MSZ-AP25/35/42/50VGK-ET1 Versions not published
Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ET2 Versions not published
Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ET3 Versions not published
Air Conditioning MSZ-AY25/35/42/50VGK-E1 Versions not published
Air Conditioning MSZ-AY25/35/42/50VGK-E6 Versions not published
Air Conditioning MSZ-AY25/35/42/50VGK-ER1 Versions not published
Air Conditioning MSZ-AY25/35/42/50VGK-ET1 Versions not published
Air Conditioning MSZ-AY25/35/42/50VGK-SC1 Versions not published
Air Conditioning MSZ-AY25/35/42/50VGKP-E6 Versions not published
Air Conditioning MSZ-AY25/35/42/50VGKP-ER1 Versions not published
Air Conditioning MSZ-AY25/35/42/50VGKP-ET1 Versions not published
Air Conditioning MSZ-AY25/35/42/50VGKP-SC1 Versions not published
Air Conditioning MSZ-BT20/25/35/50VGK-E1 Versions not published
Air Conditioning MSZ-BT20/25/35/50VGK-E2 Versions not published
Air Conditioning MSZ-BT20/25/35/50VGK-E3 Versions not published
Air Conditioning MSZ-BT20/25/35/50VGK-ER1 Versions not published
Air Conditioning MSZ-BT20/25/35/50VGK-ER2 Versions not published
Air Conditioning MSZ-BT20/25/35/50VGK-ET1 Versions not published
Air Conditioning MSZ-BT20/25/35/50VGK-ET2 Versions not published
Air Conditioning MSZ-BT20/25/35/50VGK-ET3 Versions not published
Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E1 Versions not published
Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E1 Versions not published
Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E1 Versions not published
Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E2 Versions not published
Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E2 Versions not published
Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E2 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER1 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER1 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER1 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER2 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER2 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER2 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET1 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET1 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET1 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET2 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET2 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET2 Versions not published
Air Conditioning MSZ-FT25/35/50VGK-E1 Versions not published
Air Conditioning MSZ-FT25/35/50VGK-E2 Versions not published
Air Conditioning MSZ-FT25/35/50VGK-ET1 Versions not published
Air Conditioning MSZ-FT25/35/50VGK-SC1 Versions not published
Air Conditioning MSZ-FT25/35/50VGK-SC2 Versions not published
Air Conditioning MSZ-HR25/35/42/50/60/71VFK-E1 Versions not published
Air Conditioning MSZ-HR25/35/42/50VFK-E6 Versions not published
Air Conditioning MSZ-HR25/35/42/50/60/71VFK-ER1 Versions not published
Air Conditioning MSZ-HR25/35/42/50/60/71VFK-ET1 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2W-E2 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2W-E3 Versions not published
Air Conditioning MSZ-LN25/35/50VG2W-EN2 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2W-ER2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2W-ER3 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2W-ET2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2W-ET3 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2V-E2 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2V-E3 Versions not published
Air Conditioning MSZ-LN25/35/50VG2V-EN2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2V-ER2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2V-ER3 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2V-ET2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2V-ET3 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2B-E2 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2B-E3 Versions not published
Air Conditioning MSZ-LN25/35/50VG2B-EN2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2B-ER2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2B-ER3 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2B-ET2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2B-ET3 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2R-E2 Versions not published
Air Conditioning MSZ-LN18/25/35/50/60VG2R-E3 Versions not published
Air Conditioning MSZ-LN25/35/50VG2R-EN2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2R-ER2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2R-ER3 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2R-ET2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2R-ET3 Versions not published
Air Conditioning MSZ-LN18/25/35/50VG2W-SC1 Versions not published
Air Conditioning MSZ-LN25/35/50VG2V-SC1 Versions not published
Air Conditioning MSZ-LN25/35/50VG2B-SC1 Versions not published
Air Conditioning MSZ-LN25/35/50VG2R-SC1 Versions not published
Air Conditioning MSZ-RW25/35/50VG-E1 Versions not published
Air Conditioning MSZ-RW25/35/50VG-ER1 Versions not published
Air Conditioning MSZ-RW25/35/50VG-ET1 Versions not published
Air Conditioning MSZ-RW25/35/50VG-SC1 Versions not published
Air Conditioning MSZ-AP22/25/35/42/50/61/70/80VGKD-A1 Versions not published
Air Conditioning MSZ-AP22/25/35/42/50/60/71/80VGKD-A2 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKW-A1 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKB-A1 Versions not published
Air Conditioning MSZ-EF22/25/35/42/50VGKS-A1 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2V-A2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2B-A2 Versions not published
Air Conditioning MSZ-LN25/35/50/60VG2R-A2 Versions not published
Air Conditioning MFZ-GXT50/60/73VFK Versions not published
Air Conditioning MFZ-XT50/60VFK Versions not published
Air Conditioning MSZ-EZA09/12VAK Versions not published
Air Conditioning MSZ-EXA09/12VAK Versions not published
Air Conditioning MSZ-GZY09/12/18VFK Versions not published
Air Conditioning MSZ-KY09/12/18VFK Versions not published
Air Conditioning MSZ-WX18/20/25VFK Versions not published
Air Conditioning MSZ-ZY09/12/18VFK Versions not published
Air Purifier MA-EW85S-E Versions not published
Air Purifier MA-EW85S-UK Versions not published

Other CVEs of Air Conditioning MSZ-FD40/56/63/71/8022S

The 2 CVEs of Air Conditioning MSZ-FD40/56/63/71/8022S →
CVE-2022-33321 Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP… 9.8 Critical
Track this CVE