CVE-2022-33322

MEDIUM

6.1

Description

Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

CVE Details

CVSS v3.1 Score6.1

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published11/8/2022

Last Modified5/1/2025

Sourcenvd

Honeypot Sightings0

Affected Products

mitsubishielectric:ma-ew85s-emitsubishielectric:ma-ew85s-e_firmwaremitsubishielectric:ma-ew85s-ukmitsubishielectric:ma-ew85s-uk_firmwaremitsubishielectric:mac-507if-emitsubishielectric:mac-507if-e_firmwaremitsubishielectric:mac-587if-emitsubishielectric:mac-587if-e_firmwaremitsubishielectric:mac-587if2-emitsubishielectric:mac-587if2-e_firmwaremitsubishielectric:mac-588if-emitsubishielectric:mac-588if-e_firmwaremitsubishielectric:mfz-gxt50\/60\/73vfkmitsubishielectric:mfz-gxt50\/60\/73vfk_firmwaremitsubishielectric:mfz-xt50\/60vfkmitsubishielectric:mfz-xt50\/60vfk_firmwaremitsubishielectric:msxy-fp05\/07\/10\/13\/18\/20\/24vgk-sg1mitsubishielectric:msxy-fp05\/07\/10\/13\/18\/20\/24vgk-sg1_firmwaremitsubishielectric:msy-gp10\/13\/15\/18\/20\/24vfk-sg1mitsubishielectric:msy-gp10\/13\/15\/18\/20\/24vfk-sg1_firmwaremitsubishielectric:msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-e2mitsubishielectric:msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-e2_firmwaremitsubishielectric:msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-er2mitsubishielectric:msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-er2_firmwaremitsubishielectric:msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-et2mitsubishielectric:msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-et2_firmwaremitsubishielectric:msz-ap22\/25\/35\/42\/50\/60\/71\/80vgkd-a2mitsubishielectric:msz-ap22\/25\/35\/42\/50\/60\/71\/80vgkd-a2_firmwaremitsubishielectric:msz-ap22\/25\/35\/42\/50\/61\/70\/80vgkd-a1mitsubishielectric:msz-ap22\/25\/35\/42\/50\/61\/70\/80vgkd-a1_firmwaremitsubishielectric:msz-ap25\/35\/42\/50\/60\/71vgk-e3mitsubishielectric:msz-ap25\/35\/42\/50\/60\/71vgk-e3_firmwaremitsubishielectric:msz-ap25\/35\/42\/50\/60\/71vgk-er3mitsubishielectric:msz-ap25\/35\/42\/50\/60\/71vgk-er3_firmwaremitsubishielectric:msz-ap25\/35\/42\/50\/60\/71vgk-et3mitsubishielectric:msz-ap25\/35\/42\/50\/60\/71vgk-et3_firmwaremitsubishielectric:msz-ap25\/35\/42\/50vgk-e1mitsubishielectric:msz-ap25\/35\/42\/50vgk-e1_firmwaremitsubishielectric:msz-ap25\/35\/42\/50vgk-e7mitsubishielectric:msz-ap25\/35\/42\/50vgk-e7_firmwaremitsubishielectric:msz-ap25\/35\/42\/50vgk-e8mitsubishielectric:msz-ap25\/35\/42\/50vgk-e8_firmwaremitsubishielectric:msz-ap25\/35\/42\/50vgk-en1mitsubishielectric:msz-ap25\/35\/42\/50vgk-en1_firmwaremitsubishielectric:msz-ap25\/35\/42\/50vgk-en2mitsubishielectric:msz-ap25\/35\/42\/50vgk-en2_firmwaremitsubishielectric:msz-ap25\/35\/42\/50vgk-en3mitsubishielectric:msz-ap25\/35\/42\/50vgk-en3_firmwaremitsubishielectric:msz-ap25\/35\/42\/50vgk-er1mitsubishielectric:msz-ap25\/35\/42\/50vgk-er1_firmwaremitsubishielectric:msz-ap25\/35\/42\/50vgk-et1mitsubishielectric:msz-ap25\/35\/42\/50vgk-et1_firmwaremitsubishielectric:msz-ay25\/35\/42\/50vgk-e1mitsubishielectric:msz-ay25\/35\/42\/50vgk-e1_firmwaremitsubishielectric:msz-ay25\/35\/42\/50vgk-e6mitsubishielectric:msz-ay25\/35\/42\/50vgk-e6_firmwaremitsubishielectric:msz-ay25\/35\/42\/50vgk-er1mitsubishielectric:msz-ay25\/35\/42\/50vgk-er1_firmwaremitsubishielectric:msz-ay25\/35\/42\/50vgk-et1mitsubishielectric:msz-ay25\/35\/42\/50vgk-et1_firmwaremitsubishielectric:msz-ay25\/35\/42\/50vgk-sc1mitsubishielectric:msz-ay25\/35\/42\/50vgk-sc1_firmwaremitsubishielectric:msz-ay25\/35\/42\/50vgkp-e6mitsubishielectric:msz-ay25\/35\/42\/50vgkp-e6_firmwaremitsubishielectric:msz-ay25\/35\/42\/50vgkp-er1mitsubishielectric:msz-ay25\/35\/42\/50vgkp-er1_firmwaremitsubishielectric:msz-ay25\/35\/42\/50vgkp-et1mitsubishielectric:msz-ay25\/35\/42\/50vgkp-et1_firmwaremitsubishielectric:msz-ay25\/35\/42\/50vgkp-sc1mitsubishielectric:msz-ay25\/35\/42\/50vgkp-sc1_firmwaremitsubishielectric:msz-bt20\/25\/35\/50vgk-e1mitsubishielectric:msz-bt20\/25\/35\/50vgk-e1_firmwaremitsubishielectric:msz-bt20\/25\/35\/50vgk-e2mitsubishielectric:msz-bt20\/25\/35\/50vgk-e2_firmwaremitsubishielectric:msz-bt20\/25\/35\/50vgk-e3mitsubishielectric:msz-bt20\/25\/35\/50vgk-e3_firmwaremitsubishielectric:msz-bt20\/25\/35\/50vgk-er1mitsubishielectric:msz-bt20\/25\/35\/50vgk-er1_firmwaremitsubishielectric:msz-bt20\/25\/35\/50vgk-er2mitsubishielectric:msz-bt20\/25\/35\/50vgk-er2_firmwaremitsubishielectric:msz-bt20\/25\/35\/50vgk-et1mitsubishielectric:msz-bt20\/25\/35\/50vgk-et1_firmwaremitsubishielectric:msz-bt20\/25\/35\/50vgk-et2mitsubishielectric:msz-bt20\/25\/35\/50vgk-et2_firmwaremitsubishielectric:msz-bt20\/25\/35\/50vgk-et3mitsubishielectric:msz-bt20\/25\/35\/50vgk-et3_firmwaremitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkb-e1mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkb-e1_firmwaremitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkb-e2mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkb-e2_firmwaremitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgks-e1mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgks-e1_firmwaremitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgks-e2mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgks-e2_firmwaremitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkw-e1mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkw-e1_firmwaremitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkw-e2mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkw-e2_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-a1mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-a1_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-er1mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-er1_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-er2mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-er2_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-et1mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-et1_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-et2mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-et2_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-a1mitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-a1_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-er1mitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-er1_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-er2mitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-er2_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-et1mitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-et1_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-et2mitsubishielectric:msz-ef22\/25\/35\/42\/50vgks-et2_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-a1mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-a1_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-er1mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-er1_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-er2mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-er2_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-et1mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-et1_firmwaremitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-et2mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkw-et2_firmwaremitsubishielectric:msz-exa09\/12vakmitsubishielectric:msz-exa09\/12vak_firmwaremitsubishielectric:msz-eza09\/12vakmitsubishielectric:msz-eza09\/12vak_firmwaremitsubishielectric:msz-ft25\/35\/50vgk-e1mitsubishielectric:msz-ft25\/35\/50vgk-e1_firmwaremitsubishielectric:msz-ft25\/35\/50vgk-e2mitsubishielectric:msz-ft25\/35\/50vgk-e2_firmwaremitsubishielectric:msz-ft25\/35\/50vgk-et1mitsubishielectric:msz-ft25\/35\/50vgk-et1_firmwaremitsubishielectric:msz-ft25\/35\/50vgk-sc1mitsubishielectric:msz-ft25\/35\/50vgk-sc1_firmwaremitsubishielectric:msz-ft25\/35\/50vgk-sc2mitsubishielectric:msz-ft25\/35\/50vgk-sc2_firmwaremitsubishielectric:msz-gzy09\/12\/18vfkmitsubishielectric:msz-gzy09\/12\/18vfk_firmwaremitsubishielectric:msz-hr25\/35\/42\/50\/60\/71vfk-e1mitsubishielectric:msz-hr25\/35\/42\/50\/60\/71vfk-e1_firmwaremitsubishielectric:msz-hr25\/35\/42\/50\/60\/71vfk-er1mitsubishielectric:msz-hr25\/35\/42\/50\/60\/71vfk-er1_firmwaremitsubishielectric:msz-hr25\/35\/42\/50\/60\/71vfk-et1mitsubishielectric:msz-hr25\/35\/42\/50\/60\/71vfk-et1_firmwaremitsubishielectric:msz-hr25\/35\/42\/50vfk-e6mitsubishielectric:msz-hr25\/35\/42\/50vfk-e6_firmwaremitsubishielectric:msz-ky09\/12\/18vfkmitsubishielectric:msz-ky09\/12\/18vfk_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2b-e2mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2b-e2_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2b-e3mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2b-e3_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2r-e2mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2r-e2_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2r-e3mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2r-e3_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2v-e2mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2v-e2_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2v-e3mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2v-e3_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2w-e2mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2w-e2_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2w-e3mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2w-e3_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2w-er2mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2w-er2_firmwaremitsubishielectric:msz-ln18\/25\/35\/50\/60vg2w-et2mitsubishielectric:msz-ln18\/25\/35\/50\/60vg2w-et2_firmwaremitsubishielectric:msz-ln18\/25\/35\/50vg2w-sc1mitsubishielectric:msz-ln18\/25\/35\/50vg2w-sc1_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2b-a2mitsubishielectric:msz-ln25\/35\/50\/60vg2b-a2_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2b-er2mitsubishielectric:msz-ln25\/35\/50\/60vg2b-er2_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2b-er3mitsubishielectric:msz-ln25\/35\/50\/60vg2b-er3_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2b-et2mitsubishielectric:msz-ln25\/35\/50\/60vg2b-et2_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2b-et3mitsubishielectric:msz-ln25\/35\/50\/60vg2b-et3_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2r-a2mitsubishielectric:msz-ln25\/35\/50\/60vg2r-a2_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2r-er2mitsubishielectric:msz-ln25\/35\/50\/60vg2r-er2_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2r-er3mitsubishielectric:msz-ln25\/35\/50\/60vg2r-er3_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2r-et2mitsubishielectric:msz-ln25\/35\/50\/60vg2r-et2_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2r-et3mitsubishielectric:msz-ln25\/35\/50\/60vg2r-et3_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2v-a2mitsubishielectric:msz-ln25\/35\/50\/60vg2v-a2_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2v-er2mitsubishielectric:msz-ln25\/35\/50\/60vg2v-er2_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2v-er3mitsubishielectric:msz-ln25\/35\/50\/60vg2v-er3_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2v-et2mitsubishielectric:msz-ln25\/35\/50\/60vg2v-et2_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2v-et3mitsubishielectric:msz-ln25\/35\/50\/60vg2v-et3_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2w-er3mitsubishielectric:msz-ln25\/35\/50\/60vg2w-er3_firmwaremitsubishielectric:msz-ln25\/35\/50\/60vg2w-et3mitsubishielectric:msz-ln25\/35\/50\/60vg2w-et3_firmwaremitsubishielectric:msz-ln25\/35\/50vg2b-en2mitsubishielectric:msz-ln25\/35\/50vg2b-en2_firmwaremitsubishielectric:msz-ln25\/35\/50vg2b-sc1mitsubishielectric:msz-ln25\/35\/50vg2b-sc1_firmwaremitsubishielectric:msz-ln25\/35\/50vg2r-en2mitsubishielectric:msz-ln25\/35\/50vg2r-en2_firmwaremitsubishielectric:msz-ln25\/35\/50vg2r-sc1mitsubishielectric:msz-ln25\/35\/50vg2r-sc1_firmwaremitsubishielectric:msz-ln25\/35\/50vg2v-en2mitsubishielectric:msz-ln25\/35\/50vg2v-en2_firmwaremitsubishielectric:msz-ln25\/35\/50vg2v-sc1mitsubishielectric:msz-ln25\/35\/50vg2v-sc1_firmwaremitsubishielectric:msz-ln25\/35\/50vg2w-en2mitsubishielectric:msz-ln25\/35\/50vg2w-en2_firmwaremitsubishielectric:msz-rw25\/35\/50vg-e1mitsubishielectric:msz-rw25\/35\/50vg-e1_firmwaremitsubishielectric:msz-rw25\/35\/50vg-er1mitsubishielectric:msz-rw25\/35\/50vg-er1_firmwaremitsubishielectric:msz-rw25\/35\/50vg-et1mitsubishielectric:msz-rw25\/35\/50vg-et1_firmwaremitsubishielectric:msz-rw25\/35\/50vg-sc1mitsubishielectric:msz-rw25\/35\/50vg-sc1_firmwaremitsubishielectric:msz-wx18\/20\/25vfkmitsubishielectric:msz-wx18\/20\/25vfk_firmwaremitsubishielectric:msz-zy09\/12\/18vfkmitsubishielectric:msz-zy09\/12\/18vfk_firmwaremitsubishielectric:s-mac-002ifmitsubishielectric:s-mac-002if_firmware

Weaknesses (CWE)

CWE-79CWE-79

References

https://jvn.jp/vu/JVNVU96767562/index.html(Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp)

https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf(Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp)

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-011_en.pdf(Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp)

https://jvn.jp/vu/JVNVU96767562/index.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf(af854a3a-2127-422b-91ae-364da2661108)

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-011_en.pdf(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.