CVE-2022-33322
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator,…
- Published
- Updated
- Reserved
- Assigned by
- Mitsubishi
Description
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| NVDNVD · Modified | 3.1 | Medium6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
- EPSS (exploitation in 30 days)
- 1.1% · top 34% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.1.
Weakness
Affected products
Mitsubishi Electric Corporation · Air Conditioning MSZ-FD40/56/63/71/8022S
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-HXV25/28/40/56/63/71/8022S
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-VXV40/56/63/71/8022S
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-ZD25/28/40/56/63/71/8022(S)
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-FZ40/56/63/71/80/9021S
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9021(S)
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-FZV40/56/63/71/80/9021S
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S)
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9021E9(S)
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-FZ40/56/63/71/80/9020S
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S)
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-FZV40/56/63/71/80/9020S
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S)
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9020E8(S)
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Wi-Fi Interface MAC-900IF
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Wi-Fi Interface PAC-SK43ML
- affected versions 30.00 to 35.00
Mitsubishi Electric Corporation · Refrigerator MR-MXD50/57G
- affected versions 00.68 and prior
Mitsubishi Electric Corporation · Refrigerator MR-WXD52/60/70G
- affected versions 00.68 and prior
Mitsubishi Electric Corporation · Refrigerator MR-WZ55/61H
- affected versions 00.68 and prior
Mitsubishi Electric Corporation · Refrigerator MR-MZ54/60H
- affected versions 00.68 and prior
Mitsubishi Electric Corporation · HEMS adapter GT-HEM4
- affected versions 00.83 and prior
Mitsubishi Electric Corporation · Wi-Fi Interface GT-RA1
- affected versions 00.83 and prior
Mitsubishi Electric Corporation · Wi-Fi Interface GT-RA2
- affected versions 00.83 and prior
Mitsubishi Electric Corporation · Wi-Fi Interface GT-HR1
- affected versions 00.83 and prior
Mitsubishi Electric Corporation · Remote control with Wi-Fi Interface RMCB-H6SE-T
- affected versions 00.83 and prior
Mitsubishi Electric Corporation · Remote control with Wi-Fi Interface RMCB-F6SE-T
- affected versions 00.83 and prior
Mitsubishi Electric Corporation · Remote control with Wi-Fi Interface RMCB-D6SE-T
- affected versions 00.83 and prior
Mitsubishi Electric Corporation · BATHROOM THERMO VENTILATOR V-241BZ-RC
- affected versions 00.65 and prior
Mitsubishi Electric Corporation · BATHROOM THERMO VENTILATOR V-241BZ5-RC
- affected versions 00.65 and prior
Mitsubishi Electric Corporation · BATHROOM THERMO VENTILATOR WD-240DK-RC
- affected versions 00.65 and prior
Mitsubishi Electric Corporation · BATHROOM THERMO VENTILATOR WD-240DK2-RC
- affected versions 00.65 and prior
Mitsubishi Electric Corporation · Rice cooker NJ-AWBX10
- affected versions 00.75 and prior
Mitsubishi Electric Corporation · Mitsubishi Electric HEMS control adapter P-HM04WA
- affected versions 00.67 and prior
Mitsubishi Electric Corporation · Wi-Fi Interface P-WA01
- affected versions 00.67 and prior
Mitsubishi Electric Corporation · Energy Recovery Ventilator VL-200ZMHSV3-RC
- affected versions 00.71 and prior
Mitsubishi Electric Corporation · Smart Switch P-1600SWRC
- affected versions 00.90 and prior
Mitsubishi Electric Corporation · Smart Switch P-04SWRC
- affected versions 00.90 and prior
Mitsubishi Electric Corporation · Smart Switch P-10SWRC
- affected versions 00.90 and prior
Mitsubishi Electric Corporation · Wi-Fi Interface MAC-587IF-E
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Wi-Fi Interface MAC-587IF2-E
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Wi-Fi Interface MAC-507IF-E
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Wi-Fi Interface MAC-588IF-E
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Wi-Fi Interface S-MAC-002IF
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSXY-FP05/07/10/13/18/20/24VGK-SG1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSY-GP10/13/15/18/20/24VFK-SG1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50VGK-E1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50/60/71VGK-E3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50VGK-E7
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50VGK-E8
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50VGK-EN1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50VGK-EN2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50VGK-EN3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50VGK-ER1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ER2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ER3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50VGK-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ET2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ET3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AY25/35/42/50VGK-E1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AY25/35/42/50VGK-E6
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AY25/35/42/50VGK-ER1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AY25/35/42/50VGK-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AY25/35/42/50VGK-SC1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AY25/35/42/50VGKP-E6
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AY25/35/42/50VGKP-ER1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AY25/35/42/50VGKP-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AY25/35/42/50VGKP-SC1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-BT20/25/35/50VGK-E1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-BT20/25/35/50VGK-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-BT20/25/35/50VGK-E3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-BT20/25/35/50VGK-ER1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-BT20/25/35/50VGK-ER2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-BT20/25/35/50VGK-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-BT20/25/35/50VGK-ET2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-BT20/25/35/50VGK-ET3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-FT25/35/50VGK-E1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-FT25/35/50VGK-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-FT25/35/50VGK-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-FT25/35/50VGK-SC1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-FT25/35/50VGK-SC2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-HR25/35/42/50/60/71VFK-E1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-HR25/35/42/50VFK-E6
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-HR25/35/42/50/60/71VFK-ER1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-HR25/35/42/50/60/71VFK-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2W-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2W-E3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50VG2W-EN2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2W-ER2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2W-ER3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2W-ET2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2W-ET3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2V-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2V-E3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50VG2V-EN2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2V-ER2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2V-ER3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2V-ET2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2V-ET3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2B-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2B-E3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50VG2B-EN2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2B-ER2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2B-ER3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2B-ET2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2B-ET3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2R-E2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50/60VG2R-E3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50VG2R-EN2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2R-ER2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2R-ER3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2R-ET2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2R-ET3
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN18/25/35/50VG2W-SC1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50VG2V-SC1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50VG2B-SC1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50VG2R-SC1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-RW25/35/50VG-E1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-RW25/35/50VG-ER1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-RW25/35/50VG-ET1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-RW25/35/50VG-SC1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP22/25/35/42/50/61/70/80VGKD-A1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-AP22/25/35/42/50/60/71/80VGKD-A2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKW-A1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKB-A1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EF22/25/35/42/50VGKS-A1
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2V-A2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2B-A2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-LN25/35/50/60VG2R-A2
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MFZ-GXT50/60/73VFK
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MFZ-XT50/60VFK
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EZA09/12VAK
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-EXA09/12VAK
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-GZY09/12/18VFK
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-KY09/12/18VFK
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-WX18/20/25VFK
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Conditioning MSZ-ZY09/12/18VFK
- affected Versions 35.00 and prior
Mitsubishi Electric Corporation · Air Purifier MA-EW85S-E
- affected Versions 80.00 and prior
Mitsubishi Electric Corporation · Air Purifier MA-EW85S-UK
- affected Versions 80.00 and prior
References (3)
- https://jvn.jp/vu/JVNVU96767562/index.html (opens in a new tab)government-resourcex_transferred
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-011_en.pdf (opens in a new tab)vendor-advisoryx_transferred
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf (opens in a new tab)vendor-advisoryx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-33322)Record last updated .