Description (CNA)
Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch, Ventilating Fan, Range hood fan, Energy Measurement Unit and Air Purifier) allows a remote unauthenticated attacker to disclose information in the products or cause a denial of service (DoS) condition as a result by sniffing credential information (username and password). The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mitsubishi Electric Corporation / PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-M | affected all versions |
| Mitsubishi Electric Corporation / PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-GW-M | affected all versions |
| Mitsubishi Electric Corporation / PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-MRC-M | affected all versions |
| Mitsubishi Electric Corporation / PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-Y | affected all versions |
| Mitsubishi Electric Corporation / PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-GW-Y | affected all versions |
| Mitsubishi Electric Corporation / PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-MRC-Y | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter GT-HEM1 | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter GT-HEM2 | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter GT-HEM3 | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter GT-HEM3-M | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter P-01HMA | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter P-HM02WA | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter P-HM03WA | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter VEZ-HM01WA | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter HM-01A-CS | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter HM-01A-EX | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter HM-01A-VEH | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter HM-02A-CS | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter HM-02A-REF | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter HM-02A-VEH | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter HM-WF001 | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter HM-W002-AC | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter HM-W002-ACB | affected all versions |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-884IF | affected all versions |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-888IF | affected all versions |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80E2(S) | affected all versions |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/90E3(S) | affected all versions |
| Mitsubishi Electric Corporation / Induction hob CS-PT31HNWSR-H | affected all versions |
| Mitsubishi Electric Corporation / Induction hob G32MS-H | affected all versions |
| Mitsubishi Electric Corporation / Induction hob G32M-H | affected all versions |
| Mitsubishi Electric Corporation / Mitsubishi Electric HEMS Energy Measurement Unit HM-EM02 | affected all versions |
| Mitsubishi Electric Corporation / Mitsubishi Electric HEMS Energy Measurement Unit HM-EM03-W | affected all versions |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-895IF | affected all versions |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FD40/56/63/71/8022S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-HXV25/28/40/56/63/71/8022S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-VXV40/56/63/71/8022S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZD25/28/40/56/63/71/8022(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FZ40/56/63/71/80/9021S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9021(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FZV40/56/63/71/80/9021S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9021E9(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FZ40/56/63/71/80/9020S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FZV40/56/63/71/80/9020S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9020E8(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-900IF | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Wi-Fi Interface PAC-SK43ML | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Refrigerator MR-MXD50/57G | affected versions 00.68 and prior |
| Mitsubishi Electric Corporation / Refrigerator MR-WXD52/60/70G | affected versions 00.68 and prior |
| Mitsubishi Electric Corporation / Refrigerator MR-WZ55/61H | affected versions 00.68 and prior |
| Mitsubishi Electric Corporation / Refrigerator MR-MZ54/60H | affected versions 00.68 and prior |
| Mitsubishi Electric Corporation / HEMS adapter GT-HEM4 | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface GT-RA1 | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface GT-RA2 | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface GT-HR1 | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Remote control with Wi-Fi Interface RMCB-H6SE-T | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Remote control with Wi-Fi Interface RMCB-F6SE-T | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Remote control with Wi-Fi Interface RMCB-D6SE-T | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-241BZ-RC | affected versions 00.65 and prior |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-241BZ5-RC | affected versions 00.65 and prior |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR WD-240DK-RC | affected versions 00.65 and prior |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR WD-240DK2-RC | affected versions 00.65 and prior |
| Mitsubishi Electric Corporation / Rice cooker NJ-AWBX10 | affected versions 00.75 and prior |
| Mitsubishi Electric Corporation / Mitsubishi Electric HEMS control adapter P-HM04WA | affected versions 00.67 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface P-WA01 | affected versions 00.67 and prior |
| Mitsubishi Electric Corporation / Energy Recovery Ventilator VL-200ZMHSV3-RC | affected versions 00.71 and prior |
| Mitsubishi Electric Corporation / Smart Switch P-1600SWRC | affected versions 00.90 and prior |
| Mitsubishi Electric Corporation / Smart Switch P-04SWRC | affected versions 00.90 and prior |
| Mitsubishi Electric Corporation / Smart Switch P-10SWRC | affected versions 00.90 and prior |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-141BZ-HM-SL | affected all versions |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-141BZ-HM-YH | affected all versions |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-141BZ-HM-SYH | affected all versions |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-143BZL-HM | affected all versions |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-143BZL2-HM | affected all versions |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-243BZL-HM | affected all versions |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-243BZL2-HM | affected all versions |
| Mitsubishi Electric Corporation / Ventilating Fan V-18ZMVC2-HM | affected all versions |
| Mitsubishi Electric Corporation / Ventilating Fan V-18ZMVC3-HM | affected all versions |
| Mitsubishi Electric Corporation / Ventilating Fan V-150CRL-D-HM | affected all versions |
| Mitsubishi Electric Corporation / Ventilating Fan VD-15ZFVC2-HM | affected all versions |
| Mitsubishi Electric Corporation / Ventilating Fan VD-15ZFVC3-HM | affected all versions |
| Mitsubishi Electric Corporation / Ventilating Fan VD-15ZFVC5-HM | affected all versions |
| Mitsubishi Electric Corporation / Ventilating Fan VD-18ZFVC2-HM | affected all versions |
| Mitsubishi Electric Corporation / Ventilating Fan VD-18ZFVC3-HM | affected all versions |
| Mitsubishi Electric Corporation / Ventilating Fan VD-18ZFVC5-HM | affected all versions |
| Mitsubishi Electric Corporation / Range hood fan V-6047S-HM | affected all versions |
| Mitsubishi Electric Corporation / Range hood fan V-754S-HM | affected all versions |
| Mitsubishi Electric Corporation / Range hood fan V-904S-HM | affected all versions |
| Mitsubishi Electric Corporation / Energy Recovery Ventilator VL-11ZFHV-HM | affected all versions |
| Mitsubishi Electric Corporation / Energy Recovery Ventilator VL-20ZMH3-L-HM | affected all versions |
| Mitsubishi Electric Corporation / Energy Recovery Ventilator VL-20ZMH3-R-HM | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter GT-HEM3-E | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter GT-HEM4-E | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter GT-HEM5-E | affected all versions |
| Mitsubishi Electric Corporation / HEMS adapter MAC-894IF | affected all versions |
| Mitsubishi Electric Corporation / Energy Measurement Unit HM-EM02 | affected all versions |
| Mitsubishi Electric Corporation / Energy Measurement Unit HM-EM03-E | affected all versions |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-557IF-E | affected all versions |
CWE
CWE-319
References
- https://jvn.jp/vu/JVNVU96767562/index.html
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-010_en.pdf
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-010.pdf
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.