Description
Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch, Ventilating Fan, Range hood fan, Energy Measurement Unit and Air Purifier) allows a remote unauthenticated attacker to disclose information in the products or cause a denial of service (DoS) condition as a result by sniffing credential information (username and password).
The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability.
As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mitsubishi Electric | PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-M | all versions | — |
| Mitsubishi Electric | PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-GW-M | all versions | — |
| Mitsubishi Electric | PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-MRC-M | all versions | — |
| Mitsubishi Electric | PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-Y | all versions | — |
| Mitsubishi Electric | PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-GW-Y | all versions | — |
| Mitsubishi Electric | PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-MRC-Y | all versions | — |
| Mitsubishi Electric | HEMS adapter GT-HEM1 | all versions | — |
| Mitsubishi Electric | HEMS adapter GT-HEM2 | all versions | — |
| Mitsubishi Electric | HEMS adapter GT-HEM3 | all versions | — |
| Mitsubishi Electric | HEMS adapter GT-HEM3-M | all versions | — |
| Mitsubishi Electric | HEMS adapter P-01HMA | all versions | — |
| Mitsubishi Electric | HEMS adapter P-HM02WA | all versions | — |
| Mitsubishi Electric | HEMS adapter P-HM03WA | all versions | — |
| Mitsubishi Electric | HEMS adapter VEZ-HM01WA | all versions | — |
| Mitsubishi Electric | HEMS adapter HM-01A-CS | all versions | — |
| Mitsubishi Electric | HEMS adapter HM-01A-EX | all versions | — |
| Mitsubishi Electric | HEMS adapter HM-01A-VEH | all versions | — |
| Mitsubishi Electric | HEMS adapter HM-02A-CS | all versions | — |
| Mitsubishi Electric | HEMS adapter HM-02A-REF | all versions | — |
| Mitsubishi Electric | HEMS adapter HM-02A-VEH | all versions | — |
| Mitsubishi Electric | HEMS adapter HM-WF001 | all versions | — |
| Mitsubishi Electric | HEMS adapter HM-W002-AC | all versions | — |
| Mitsubishi Electric | HEMS adapter HM-W002-ACB | all versions | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-884IF | all versions | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-888IF | all versions | — |
| Mitsubishi Electric | Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80E2(S) | all versions | — |
| Mitsubishi Electric | Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/90E3(S) | all versions | — |
| Mitsubishi Electric | Induction hob CS-PT31HNWSR-H | all versions | — |
| Mitsubishi Electric | Induction hob G32MS-H | all versions | — |
| Mitsubishi Electric | Induction hob G32M-H | all versions | — |
| Mitsubishi Electric | Mitsubishi Electric HEMS Energy Measurement Unit HM-EM02 | all versions | — |
| Mitsubishi Electric | Mitsubishi Electric HEMS Energy Measurement Unit HM-EM03-W | all versions | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-895IF | all versions | — |
| Mitsubishi Electric | Air Conditioning MSZ-FD40/56/63/71/8022S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-HXV25/28/40/56/63/71/8022S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-VXV40/56/63/71/8022S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZD25/28/40/56/63/71/8022(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-FZ40/56/63/71/80/9021S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9021(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-FZV40/56/63/71/80/9021S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9021E9(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-FZ40/56/63/71/80/9020S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-FZV40/56/63/71/80/9020S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9020E8(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-900IF | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Wi-Fi Interface PAC-SK43ML | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Refrigerator MR-MXD50/57G | versions 00.68 and prior | — |
| Mitsubishi Electric | Refrigerator MR-WXD52/60/70G | versions 00.68 and prior | — |
| Mitsubishi Electric | Refrigerator MR-WZ55/61H | versions 00.68 and prior | — |
| Mitsubishi Electric | Refrigerator MR-MZ54/60H | versions 00.68 and prior | — |
| Mitsubishi Electric | HEMS adapter GT-HEM4 | versions 00.83 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface GT-RA1 | versions 00.83 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface GT-RA2 | versions 00.83 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface GT-HR1 | versions 00.83 and prior | — |
| Mitsubishi Electric | Remote control with Wi-Fi Interface RMCB-H6SE-T | versions 00.83 and prior | — |
| Mitsubishi Electric | Remote control with Wi-Fi Interface RMCB-F6SE-T | versions 00.83 and prior | — |
| Mitsubishi Electric | Remote control with Wi-Fi Interface RMCB-D6SE-T | versions 00.83 and prior | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-241BZ-RC | versions 00.65 and prior | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-241BZ5-RC | versions 00.65 and prior | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR WD-240DK-RC | versions 00.65 and prior | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR WD-240DK2-RC | versions 00.65 and prior | — |
| Mitsubishi Electric | Rice cooker NJ-AWBX10 | versions 00.75 and prior | — |
| Mitsubishi Electric | Mitsubishi Electric HEMS control adapter P-HM04WA | versions 00.67 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface P-WA01 | versions 00.67 and prior | — |
| Mitsubishi Electric | Energy Recovery Ventilator VL-200ZMHSV3-RC | versions 00.71 and prior | — |
| Mitsubishi Electric | Smart Switch P-1600SWRC | versions 00.90 and prior | — |
| Mitsubishi Electric | Smart Switch P-04SWRC | versions 00.90 and prior | — |
| Mitsubishi Electric | Smart Switch P-10SWRC | versions 00.90 and prior | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-141BZ-HM-SL | all versions | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-141BZ-HM-YH | all versions | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-141BZ-HM-SYH | all versions | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-143BZL-HM | all versions | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-143BZL2-HM | all versions | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-243BZL-HM | all versions | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-243BZL2-HM | all versions | — |
| Mitsubishi Electric | Ventilating Fan V-18ZMVC2-HM | all versions | — |
| Mitsubishi Electric | Ventilating Fan V-18ZMVC3-HM | all versions | — |
| Mitsubishi Electric | Ventilating Fan V-150CRL-D-HM | all versions | — |
| Mitsubishi Electric | Ventilating Fan VD-15ZFVC2-HM | all versions | — |
| Mitsubishi Electric | Ventilating Fan VD-15ZFVC3-HM | all versions | — |
| Mitsubishi Electric | Ventilating Fan VD-15ZFVC5-HM | all versions | — |
| Mitsubishi Electric | Ventilating Fan VD-18ZFVC2-HM | all versions | — |
| Mitsubishi Electric | Ventilating Fan VD-18ZFVC3-HM | all versions | — |
| Mitsubishi Electric | Ventilating Fan VD-18ZFVC5-HM | all versions | — |
| Mitsubishi Electric | Range hood fan V-6047S-HM | all versions | — |
| Mitsubishi Electric | Range hood fan V-754S-HM | all versions | — |
| Mitsubishi Electric | Range hood fan V-904S-HM | all versions | — |
| Mitsubishi Electric | Energy Recovery Ventilator VL-11ZFHV-HM | all versions | — |
| Mitsubishi Electric | Energy Recovery Ventilator VL-20ZMH3-L-HM | all versions | — |
| Mitsubishi Electric | Energy Recovery Ventilator VL-20ZMH3-R-HM | all versions | — |
| Mitsubishi Electric | HEMS adapter GT-HEM3-E | all versions | — |
| Mitsubishi Electric | HEMS adapter GT-HEM4-E | all versions | — |
| Mitsubishi Electric | HEMS adapter GT-HEM5-E | all versions | — |
| Mitsubishi Electric | HEMS adapter MAC-894IF | all versions | — |
| Mitsubishi Electric | Energy Measurement Unit HM-EM02 | all versions | — |
| Mitsubishi Electric | Energy Measurement Unit HM-EM03-E | all versions | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-557IF-E | all versions | — |
References
- https://jvn.jp/vu/JVNVU96767562/index.html government-resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-010_en.pdf vendor-advisory
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-010.pdf vendor-advisory