CVE-2022-33322
08.11.2022, 20:15
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mitsubishielectric | mac-587if-e_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | mac-587if2-e_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | mac-507if-e_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | mac-588if-e_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | s-mac-002if_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | ma-ew85s-e_firmware | 𝑥 ≤ 80.00 |
| mitsubishielectric | ma-ew85s-uk_firmware | 𝑥 ≤ 80.00 |
| mitsubishielectric | mfz-gxt50/60/73vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | mfz-xt50/60vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msxy-fp05/07/10/13/18/20/24vgk-sg1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msy-gp10/13/15/18/20/24vfk-sg1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap15/20/25/35/42/50/60/71vgk-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap15/20/25/35/42/50/60/71vgk-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap15/20/25/35/42/50/60/71vgk-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap22/25/35/42/50/60/71/80vgkd-a2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap22/25/35/42/50/61/70/80vgkd-a1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50/60/71vgk-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50/60/71vgk-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50/60/71vgk-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-e7_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-e8_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-en1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-en3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ap25/35/42/50vgk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-e6_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgk-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgkp-e6_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgkp-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgkp-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ay25/35/42/50vgkp-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-bt20/25/35/50vgk-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgkb-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgkb-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgks-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgks-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgkw-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef18/22/25/35/42/50vgkw-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-a1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkb-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-a1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgks-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-a1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ef22/25/35/42/50vgkw-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-exa09/12vak_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-eza09/12vak_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ft25/35/50vgk-sc2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-gzy09/12/18vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-hr25/35/42/50/60/71vfk-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-hr25/35/42/50/60/71vfk-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-hr25/35/42/50/60/71vfk-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-hr25/35/42/50vfk-e6_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ky09/12/18vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2b-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2b-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2r-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2r-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2v-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2v-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-e2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-e3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50/60vg2w-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln18/25/35/50vg2w-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-a2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2b-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-a2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2r-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-a2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-er2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-et2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2v-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2w-er3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50/60vg2w-et3_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2b-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2b-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2r-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2r-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2v-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2v-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-ln25/35/50vg2w-en2_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-rw25/35/50vg-e1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-rw25/35/50vg-er1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-rw25/35/50vg-et1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-rw25/35/50vg-sc1_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-wx18/20/25vfk_firmware | 𝑥 ≤ 35.00 |
| mitsubishielectric | msz-zy09/12/18vfk_firmware | 𝑥 ≤ 35.00 |
𝑥
= Vulnerable software versions
References