Description (CNA)
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FD40/56/63/71/8022S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-HXV25/28/40/56/63/71/8022S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-VXV40/56/63/71/8022S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZD25/28/40/56/63/71/8022(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FZ40/56/63/71/80/9021S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9021(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FZV40/56/63/71/80/9021S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9021E9(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FZ40/56/63/71/80/9020S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FZV40/56/63/71/80/9020S | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9020E8(S) | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-900IF | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Wi-Fi Interface PAC-SK43ML | affected versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation / Refrigerator MR-MXD50/57G | affected versions 00.68 and prior |
| Mitsubishi Electric Corporation / Refrigerator MR-WXD52/60/70G | affected versions 00.68 and prior |
| Mitsubishi Electric Corporation / Refrigerator MR-WZ55/61H | affected versions 00.68 and prior |
| Mitsubishi Electric Corporation / Refrigerator MR-MZ54/60H | affected versions 00.68 and prior |
| Mitsubishi Electric Corporation / HEMS adapter GT-HEM4 | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface GT-RA1 | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface GT-RA2 | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface GT-HR1 | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Remote control with Wi-Fi Interface RMCB-H6SE-T | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Remote control with Wi-Fi Interface RMCB-F6SE-T | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / Remote control with Wi-Fi Interface RMCB-D6SE-T | affected versions 00.83 and prior |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-241BZ-RC | affected versions 00.65 and prior |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR V-241BZ5-RC | affected versions 00.65 and prior |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR WD-240DK-RC | affected versions 00.65 and prior |
| Mitsubishi Electric Corporation / BATHROOM THERMO VENTILATOR WD-240DK2-RC | affected versions 00.65 and prior |
| Mitsubishi Electric Corporation / Rice cooker NJ-AWBX10 | affected versions 00.75 and prior |
| Mitsubishi Electric Corporation / Mitsubishi Electric HEMS control adapter P-HM04WA | affected versions 00.67 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface P-WA01 | affected versions 00.67 and prior |
| Mitsubishi Electric Corporation / Energy Recovery Ventilator VL-200ZMHSV3-RC | affected versions 00.71 and prior |
| Mitsubishi Electric Corporation / Smart Switch P-1600SWRC | affected versions 00.90 and prior |
| Mitsubishi Electric Corporation / Smart Switch P-04SWRC | affected versions 00.90 and prior |
| Mitsubishi Electric Corporation / Smart Switch P-10SWRC | affected versions 00.90 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-587IF-E | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-587IF2-E | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-507IF-E | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface MAC-588IF-E | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Wi-Fi Interface S-MAC-002IF | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSXY-FP05/07/10/13/18/20/24VGK-SG1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSY-GP10/13/15/18/20/24VFK-SG1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50VGK-E1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-E2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50/60/71VGK-E3 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50VGK-E7 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50VGK-E8 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50VGK-EN1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50VGK-EN2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50VGK-EN3 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50VGK-ER1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ER2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ER3 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50VGK-ET1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ET2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ET3 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AY25/35/42/50VGK-E1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AY25/35/42/50VGK-E6 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AY25/35/42/50VGK-ER1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AY25/35/42/50VGK-ET1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AY25/35/42/50VGK-SC1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AY25/35/42/50VGKP-E6 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AY25/35/42/50VGKP-ER1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AY25/35/42/50VGKP-ET1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-AY25/35/42/50VGKP-SC1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-BT20/25/35/50VGK-E1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-BT20/25/35/50VGK-E2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-BT20/25/35/50VGK-E3 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-BT20/25/35/50VGK-ER1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-BT20/25/35/50VGK-ER2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-BT20/25/35/50VGK-ET1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-BT20/25/35/50VGK-ET2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-BT20/25/35/50VGK-ET3 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FT25/35/50VGK-E1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FT25/35/50VGK-E2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FT25/35/50VGK-ET1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FT25/35/50VGK-SC1 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-FT25/35/50VGK-SC2 | affected Versions 35.00 and prior |
| Mitsubishi Electric Corporation / Air Conditioning MSZ-HR25/35/42/50/60/71VFK-E1 | affected Versions 35.00 and prior |
CWE
CWE-79
References
- https://jvn.jp/vu/JVNVU96767562/index.html
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-011_en.pdf
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.