CVE-2022-24296
Description
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishi ae-200a_firmware | v ≤ 7.97 | — |
| mitsubishi ae-200e_firmware | v ≤ 7.97 | — |
| mitsubishi ae-200j_firmware | v ≤ 7.97 | — |
| mitsubishi ae-50a_firmware | v ≤ 7.97 | — |
| mitsubishi ae-50e_firmware | v ≤ 7.97 | — |
| mitsubishi ae-50j_firmware | v ≤ 7.97 | — |
| mitsubishi ag-150a-a_firmware | v ≤ 3.21 | — |
| mitsubishi ag-150a-j_firmware | v ≤ 3.21 | — |
| mitsubishi eb-50gu-a_firmware | v ≤ 7.10 | — |
| mitsubishi eb-50gu-j_firmware | v ≤ 7.10 | — |
| mitsubishi ew-50a_firmware | v ≤ 7.97 | — |
| mitsubishi ew-50e_firmware | v ≤ 7.97 | — |
| mitsubishi ew-50j_firmware | v ≤ 7.97 | — |
| mitsubishi g-150ad_firmware | v ≤ 3.21 | — |
| mitsubishi gb-50a_firmware | v ≤ 3.21 | — |
| mitsubishi gb-50ada-a_firmware | v ≤ 3.21 | — |
| mitsubishi gb-50ada-j_firmware | v ≤ 3.21 | — |
| mitsubishi te-200a_firmware | v ≤ 7.97 | — |
| mitsubishi te-50a_firmware | v ≤ 7.97 | — |
| mitsubishi tw-50a_firmware | v ≤ 7.97 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.