Skip to content
OpenAdvisories
High ICSA-22-160-01 5 CVEs

Mitsubishi Electric Air Conditioning Systems

Published Jun 9, 2022 · Updated Jun 9, 2022

Vendor: Mitsubishi Electric Product: AE-200A Product: AE-200E Product: AE-200J Product: AE-50A Product: AE-50E Product: AE-50J Product: AG-150A-A Product: AG-150A-J Product: EB-50GU-A Product: EB-50GU-J Product: EW-50A Product: EW-50E Product: EW-50J Product: G-150AD Product: GB-50AD Product: GB-50ADA-A Product: GB-50ADA-J Product: TE-200A Product: TE-50A Product: TW-50A

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose or tamper data in communication between the air conditioning system and the external computers or cause a denial-of-service condition.

Vulnerabilities 5

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • High 7.5
    CVE-2016-2183 Public exploit EPSS 95%

    The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

    openjdk-8 openssl openjdk-7 openssl Ubuntu Alpine
  • Medium 5.9
    CVE-2013-2566 Public exploit EPSS 84%

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for…

  • Low 3.7
    CVE-2015-2808 EPSS 74%

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data dur…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2022-24296

    Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, …

Revision history

  1. #1

    ICSA-22-160-01 Mitsubishi Electric Air Conditioning Systems

References