High ICSA-21-182-04 1 CVE

Mitsubishi Electric Air Conditioning System

Published Jul 1, 2021 · Updated Jul 1, 2021

Vendor: Mitsubishi Electric Product: AE-200A Product: AE-200E Product: AE-50A Product: AE-50E Product: AG-150A-A Product: AG-150A-J Product: CMS-RMD-J Product: EB-50GU-A Product: EB-50GU-J Product: EW-50A Product: EW-50E Product: G-50A Product: GB-50A Product: GB-50ADA-A Product: GB-50ADA-J Product: PAC-YG50ECA Product: TE-200A Product: TE-50A Product: TW-50A

Summary

An attacker could exploit this vulnerability by impersonating administrators to disclose configuration information of the air conditioning system in order to tamper with operation information and system configuration.

Vulnerabilities 1

Unscored —

CVE-2021-20593

Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Control…

Jul 13, 2021

Revision history

2021-07-01 #1
Publication Date

References

ICS Advisory ICSA-21-182-04 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-182-04
Recommended Practices
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B