CVE-2022-33321
08.11.2022, 20:15
Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch, Ventilating Fan, Range hood fan, Energy Measurement Unit and Air Purifier) allows a remote unauthenticated attacker to disclose information in the products or cause a denial of service (DoS) condition as a result by sniffing credential information (username and password). The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mitsubishielectric | mac-557if-e_firmware | * |
| mitsubishielectric | mac-557if-e1_firmware | * |
| mitsubishielectric | pac-wf010-e_firmware | * |
| mitsubishielectric | mac-566ifb-e_firmware | * |
| mitsubishielectric | mac-576if-e1_firmware | * |
| mitsubishielectric | mac-567ifb-e_firmware | * |
| mitsubishielectric | mac-567ifb2-e_firmware | * |
| mitsubishielectric | mac-558if-e_firmware | * |
| mitsubishielectric | mac-558if-e1_firmware | * |
| mitsubishielectric | mac-559if-e_firmware | * |
| mitsubishielectric | mac-559if-e1_firmware | * |
| mitsubishielectric | mac-568if-e_firmware | * |
| mitsubishielectric | mac-568ifb-e_firmware | * |
| mitsubishielectric | mac-568ifb2-e_firmware | * |
| mitsubishielectric | mac-568ifb3-e_firmware | * |
| mitsubishielectric | pac-whs01wf-e_firmware | * |
| mitsubishielectric | s-mac-702if-f_firmware | * |
| mitsubishielectric | s-mac-702if-z_firmware | * |
| mitsubishielectric | s-mac-702if-b_firmware | * |
| mitsubishielectric | s-mac-905if_firmware | * |
| mitsubishielectric | s-mac-906if_firmware | * |
| mitsubishielectric | msz-ap60/71vgk-e1_firmware | * |
| mitsubishielectric | msz-ap60/71vgk-er1_firmware | * |
| mitsubishielectric | msz-ap60/71vgk-et1_firmware | * |
| mitsubishielectric | msz-ap25/35/42/50vgk-e6_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vgw-e1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vgv-e1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vgb-e1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vgr-e1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vgw-er1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vgv-er1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vgb-er1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vgr-er1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-e1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vg2v-e1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vg2b-e1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vg2r-e1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-er1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vg2v-er1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vg2b-er1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vg2r-er1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-et1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vg2v-et1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vg2b-et1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50/60vg2r-et1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50vg2w-en1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50vg2v-en1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50vg2b-en1_firmware | * |
| mitsubishielectric | msz-ln18/25/35/50vg2r-en1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vgv-a1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vgb-a1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vgr-a1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vg2v-a1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vg2b-a1_firmware | * |
| mitsubishielectric | msz-ln25/35/50/60vg2r-a1_firmware | * |
| mitsubishielectric | msz-ft20/25vfk_firmware | * |
| mitsubishielectric | msz-fx20/25vfk_firmware | * |
| mitsubishielectric | msz-gzt09/12/18vak_firmware | * |
| mitsubishielectric | msz-zt09/12/18vak_firmware | * |
| mitsubishielectric | mac-587if-e_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | mac-587if2-e_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | mac-507if-e_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | mac-588if-e_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | s-mac-002if_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | ma-ew85s-e_firmware | 𝑥 ≤ 80.00 |
| mitsubishielectric | ma-ew85s-uk_firmware | 𝑥 ≤ 80.00 |
| mitsubishielectric | msxy-fp05/07/10/13/18/20/24vgk-sg1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msy-gp10/13/15/18/20/24vfk-sg1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap15/20/25/35/42/50/60/71vgk-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50/60/71vgk-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-e7_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-e8_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-en1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-en3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap15/20/25/35/42/50/60/71vgk-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50/60/71vgk-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap15/20/25/35/42/50/60/71vgk-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50/60/71vgk-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-e6_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgkp-e6_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgkp-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgkp-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgkp-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgkw-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgkb-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgks-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgkw-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgkb-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgks-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-sc2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-hr25/35/42/50/60/71vfk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-hr25/35/42/50vfk-e6_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-hr25/35/42/50/60/71vfk-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-hr25/35/42/50/60/71vfk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2w-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2w-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2w-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2v-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2v-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2v-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2b-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2b-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2b-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2r-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2r-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2r-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50vg2w-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2v-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2b-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2r-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-rw25/35/50vg-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-rw25/35/50vg-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-rw25/35/50vg-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-rw25/35/50vg-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap22/25/35/42/50/61/70/80vgkd-a1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap22/25/35/42/50/60/71/80vgkd-a2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-a1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-a1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-a1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-a2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-a2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-a2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | mfz-gxt50/60/73vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | mfz-xt50/60vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-eza09/12vak_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-exa09/12vak_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-gzy09/12/18vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ky09/12/18vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-wx18/20/25vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-zy09/12/18vfk_firmware | 𝑥 ≤ 35.00 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References