CVE-2022-33321
Critical
Description
Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch, Ventilating Fan, Range hood fan, Energy Measurement Unit and Air Purifier) allows a remote unauthenticated attacker to disclose information in the products or cause a denial of service (DoS) condition as a result by sniffing credential information (username and password). The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
SeverityCritical
CVSS9.8
Exploit probability—
ProductMitsubishielectric Mac-557if-e Firmware
PublishedNov 8, 2022
First seenNov 8, 2022
Weakness typeCWE-319CWE-319
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitsubishielectric mac-557if-e_firmware | No range specified | — |
| mitsubishielectric mac-557if-e1_firmware | No range specified | — |
| mitsubishielectric pac-wf010-e_firmware | No range specified | — |
| mitsubishielectric mac-566ifb-e_firmware | No range specified | — |
| mitsubishielectric mac-576if-e1_firmware | No range specified | — |
| mitsubishielectric mac-567ifb-e_firmware | No range specified | — |
| mitsubishielectric mac-567ifb2-e_firmware | No range specified | — |
| mitsubishielectric mac-558if-e_firmware | No range specified | — |
| mitsubishielectric mac-558if-e1_firmware | No range specified | — |
| mitsubishielectric mac-559if-e_firmware | No range specified | — |
| mitsubishielectric mac-559if-e1_firmware | No range specified | — |
| mitsubishielectric mac-568if-e_firmware | No range specified | — |
| mitsubishielectric mac-568ifb-e_firmware | No range specified | — |
| mitsubishielectric mac-568ifb2-e_firmware | No range specified | — |
| mitsubishielectric mac-568ifb3-e_firmware | No range specified | — |
| mitsubishielectric pac-whs01wf-e_firmware | No range specified | — |
| mitsubishielectric s-mac-702if-f_firmware | No range specified | — |
| mitsubishielectric s-mac-702if-z_firmware | No range specified | — |
| mitsubishielectric s-mac-702if-b_firmware | No range specified | — |
| mitsubishielectric s-mac-905if_firmware | No range specified | — |
| mitsubishielectric s-mac-906if_firmware | No range specified | — |
| mitsubishielectric msz-ap60\/71vgk-e1_firmware | No range specified | — |
| mitsubishielectric msz-ap60\/71vgk-er1_firmware | No range specified | — |
| mitsubishielectric msz-ap60\/71vgk-et1_firmware | No range specified | — |
| mitsubishielectric msz-ap25\/35\/42\/50vgk-e6_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vgw-e1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vgv-e1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vgb-e1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vgr-e1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vgw-er1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vgv-er1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vgb-er1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vgr-er1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2w-e1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2v-e1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2b-e1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2r-e1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2w-er1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2v-er1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2b-er1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2r-er1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2w-et1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2v-et1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2b-et1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2r-et1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50vg2w-en1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50vg2v-en1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50vg2b-en1_firmware | No range specified | — |
| mitsubishielectric msz-ln18\/25\/35\/50vg2r-en1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vgv-a1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vgb-a1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vgr-a1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2v-a1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2b-a1_firmware | No range specified | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2r-a1_firmware | No range specified | — |
| mitsubishielectric msz-ft20\/25vfk_firmware | No range specified | — |
| mitsubishielectric msz-fx20\/25vfk_firmware | No range specified | — |
| mitsubishielectric msz-gzt09\/12\/18vak_firmware | No range specified | — |
| mitsubishielectric msz-zt09\/12\/18vak_firmware | No range specified | — |
| mitsubishielectric mac-587if-e_firmware | v ≤ 35.00 | — |
| mitsubishielectric mac-587if2-e_firmware | v ≤ 35.00 | — |
| mitsubishielectric mac-507if-e_firmware | v ≤ 35.00 | — |
| mitsubishielectric mac-588if-e_firmware | v ≤ 35.00 | — |
| mitsubishielectric s-mac-002if_firmware | v ≤ 35.00 | — |
| mitsubishielectric ma-ew85s-e_firmware | v ≤ 80.00 | — |
| mitsubishielectric ma-ew85s-uk_firmware | v ≤ 80.00 | — |
| mitsubishielectric msxy-fp05\/07\/10\/13\/18\/20\/24vgk-sg1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msy-gp10\/13\/15\/18\/20\/24vfk-sg1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50vgk-e1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50\/60\/71vgk-e3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50vgk-e7_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50vgk-e8_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50vgk-en1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50vgk-en2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50vgk-en3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50vgk-er1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-er2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50\/60\/71vgk-er3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50vgk-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-et2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap25\/35\/42\/50\/60\/71vgk-et3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ay25\/35\/42\/50vgk-e1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ay25\/35\/42\/50vgk-e6_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ay25\/35\/42\/50vgk-er1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ay25\/35\/42\/50vgk-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ay25\/35\/42\/50vgk-sc1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ay25\/35\/42\/50vgkp-e6_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ay25\/35\/42\/50vgkp-er1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ay25\/35\/42\/50vgkp-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ay25\/35\/42\/50vgkp-sc1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-bt20\/25\/35\/50vgk-e1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-bt20\/25\/35\/50vgk-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-bt20\/25\/35\/50vgk-e3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-bt20\/25\/35\/50vgk-er1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-bt20\/25\/35\/50vgk-er2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-bt20\/25\/35\/50vgk-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-bt20\/25\/35\/50vgk-et2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-bt20\/25\/35\/50vgk-et3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgkw-e1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgkb-e1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgks-e1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgkw-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgkb-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgks-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkw-er1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-er1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-er1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkw-er2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-er2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-er2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkw-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkw-et2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-et2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-et2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ft25\/35\/50vgk-e1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ft25\/35\/50vgk-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ft25\/35\/50vgk-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ft25\/35\/50vgk-sc1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ft25\/35\/50vgk-sc2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-hr25\/35\/42\/50\/60\/71vfk-e1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-hr25\/35\/42\/50vfk-e6_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-hr25\/35\/42\/50\/60\/71vfk-er1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-hr25\/35\/42\/50\/60\/71vfk-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2w-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2w-e3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50vg2w-en2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2w-er2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2w-er3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2w-et2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2w-et3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2v-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2v-e3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50vg2v-en2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2v-er2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2v-er3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2v-et2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2v-et3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2b-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2b-e3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50vg2b-en2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2b-er2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2b-er3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2b-et2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2b-et3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2r-e2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50\/60vg2r-e3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50vg2r-en2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2r-er2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2r-er3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2r-et2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2r-et3_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln18\/25\/35\/50vg2w-sc1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50vg2v-sc1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50vg2b-sc1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50vg2r-sc1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-rw25\/35\/50vg-e1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-rw25\/35\/50vg-er1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-rw25\/35\/50vg-et1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-rw25\/35\/50vg-sc1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap22\/25\/35\/42\/50\/61\/70\/80vgkd-a1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ap22\/25\/35\/42\/50\/60\/71\/80vgkd-a2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkw-a1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-a1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-a1_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2v-a2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2b-a2_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ln25\/35\/50\/60vg2r-a2_firmware | v ≤ 35.00 | — |
| mitsubishielectric mfz-gxt50\/60\/73vfk_firmware | v ≤ 35.00 | — |
| mitsubishielectric mfz-xt50\/60vfk_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-eza09\/12vak_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-exa09\/12vak_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-gzy09\/12\/18vfk_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-ky09\/12\/18vfk_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-wx18\/20\/25vfk_firmware | v ≤ 35.00 | — |
| mitsubishielectric msz-zy09\/12\/18vfk_firmware | v ≤ 35.00 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.