Description
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mitsubishi Electric | Air Conditioning MSZ-FD40/56/63/71/8022S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-HXV25/28/40/56/63/71/8022S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-VXV40/56/63/71/8022S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZD25/28/40/56/63/71/8022(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-FZ40/56/63/71/80/9021S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9021(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-FZV40/56/63/71/80/9021S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9021E9(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-FZ40/56/63/71/80/9020S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-FZV40/56/63/71/80/9020S | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9020E8(S) | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-900IF | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Wi-Fi Interface PAC-SK43ML | versions 30.00 to 35.00 | — |
| Mitsubishi Electric | Refrigerator MR-MXD50/57G | versions 00.68 and prior | — |
| Mitsubishi Electric | Refrigerator MR-WXD52/60/70G | versions 00.68 and prior | — |
| Mitsubishi Electric | Refrigerator MR-WZ55/61H | versions 00.68 and prior | — |
| Mitsubishi Electric | Refrigerator MR-MZ54/60H | versions 00.68 and prior | — |
| Mitsubishi Electric | HEMS adapter GT-HEM4 | versions 00.83 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface GT-RA1 | versions 00.83 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface GT-RA2 | versions 00.83 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface GT-HR1 | versions 00.83 and prior | — |
| Mitsubishi Electric | Remote control with Wi-Fi Interface RMCB-H6SE-T | versions 00.83 and prior | — |
| Mitsubishi Electric | Remote control with Wi-Fi Interface RMCB-F6SE-T | versions 00.83 and prior | — |
| Mitsubishi Electric | Remote control with Wi-Fi Interface RMCB-D6SE-T | versions 00.83 and prior | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-241BZ-RC | versions 00.65 and prior | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR V-241BZ5-RC | versions 00.65 and prior | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR WD-240DK-RC | versions 00.65 and prior | — |
| Mitsubishi Electric | BATHROOM THERMO VENTILATOR WD-240DK2-RC | versions 00.65 and prior | — |
| Mitsubishi Electric | Rice cooker NJ-AWBX10 | versions 00.75 and prior | — |
| Mitsubishi Electric | Mitsubishi Electric HEMS control adapter P-HM04WA | versions 00.67 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface P-WA01 | versions 00.67 and prior | — |
| Mitsubishi Electric | Energy Recovery Ventilator VL-200ZMHSV3-RC | versions 00.71 and prior | — |
| Mitsubishi Electric | Smart Switch P-1600SWRC | versions 00.90 and prior | — |
| Mitsubishi Electric | Smart Switch P-04SWRC | versions 00.90 and prior | — |
| Mitsubishi Electric | Smart Switch P-10SWRC | versions 00.90 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-587IF-E | Versions 35.00 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-587IF2-E | Versions 35.00 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-507IF-E | Versions 35.00 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface MAC-588IF-E | Versions 35.00 and prior | — |
| Mitsubishi Electric | Wi-Fi Interface S-MAC-002IF | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSXY-FP05/07/10/13/18/20/24VGK-SG1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSY-GP10/13/15/18/20/24VFK-SG1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50VGK-E1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-E2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50/60/71VGK-E3 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50VGK-E7 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50VGK-E8 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50VGK-EN1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50VGK-EN2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50VGK-EN3 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50VGK-ER1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ER2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ER3 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50VGK-ET1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ET2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ET3 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AY25/35/42/50VGK-E1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AY25/35/42/50VGK-E6 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AY25/35/42/50VGK-ER1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AY25/35/42/50VGK-ET1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AY25/35/42/50VGK-SC1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AY25/35/42/50VGKP-E6 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AY25/35/42/50VGKP-ER1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AY25/35/42/50VGKP-ET1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-AY25/35/42/50VGKP-SC1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-BT20/25/35/50VGK-E1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-BT20/25/35/50VGK-E2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-BT20/25/35/50VGK-E3 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-BT20/25/35/50VGK-ER1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-BT20/25/35/50VGK-ER2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-BT20/25/35/50VGK-ET1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-BT20/25/35/50VGK-ET2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-BT20/25/35/50VGK-ET3 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-FT25/35/50VGK-E1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-FT25/35/50VGK-E2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-FT25/35/50VGK-ET1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-FT25/35/50VGK-SC1 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-FT25/35/50VGK-SC2 | Versions 35.00 and prior | — |
| Mitsubishi Electric | Air Conditioning MSZ-HR25/35/42/50/60/71VFK-E1 | Versions 35.00 and prior | — |
References
- https://jvn.jp/vu/JVNVU96767562/index.html government-resource
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-011_en.pdf vendor-advisory
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf vendor-advisory