What’s Vulnerable › Vulnerabilities
CVE-2022-33322
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-11-08 · updated 2026-06-17
- Weakness: CWE-79
Description
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Affected products
- Mitsubishielectric Ma-Ew85S-E Firmware: through 80.00
- Mitsubishielectric Ma-Ew85S-Uk Firmware: through 80.00
- Mitsubishielectric Mac-507If-E Firmware: through 35.00
- Mitsubishielectric Mac-587If-E Firmware: through 35.00
- Mitsubishielectric Mac-587If2-E Firmware: through 35.00
- Mitsubishielectric Mac-588If-E Firmware: through 35.00
- Mitsubishielectric Mfz-Gxt50/60/73Vfk Firmware: through 35.00
- Mitsubishielectric Mfz-Xt50/60Vfk Firmware: through 35.00
- Mitsubishielectric Msxy-Fp05/07/10/13/18/20/24Vgk-Sg1 Firmware: through 35.00
- Mitsubishielectric Msy-Gp10/13/15/18/20/24Vfk-Sg1 Firmware: through 35.00
- Mitsubishielectric Msz-Ap15/20/25/35/42/50/60/71Vgk-E2 Firmware: through 35.00
- Mitsubishielectric Msz-Ap15/20/25/35/42/50/60/71Vgk-Er2 Firmware: through 35.00
- Mitsubishielectric Msz-Ap15/20/25/35/42/50/60/71Vgk-Et2 Firmware: through 35.00
- Mitsubishielectric Msz-Ap22/25/35/42/50/60/71/80Vgkd-A2 Firmware: through 35.00
- Mitsubishielectric Msz-Ap22/25/35/42/50/61/70/80Vgkd-A1 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50/60/71Vgk-E3 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50/60/71Vgk-Er3 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50/60/71Vgk-Et3 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50Vgk-E1 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50Vgk-E7 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50Vgk-E8 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50Vgk-En1 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50Vgk-En2 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50Vgk-En3 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50Vgk-Er1 Firmware: through 35.00
- Mitsubishielectric Msz-Ap25/35/42/50Vgk-Et1 Firmware: through 35.00
- Mitsubishielectric Msz-Ay25/35/42/50Vgk-E1 Firmware: through 35.00
- Mitsubishielectric Msz-Ay25/35/42/50Vgk-E6 Firmware: through 35.00
- Mitsubishielectric Msz-Ay25/35/42/50Vgk-Er1 Firmware: through 35.00
- Mitsubishielectric Msz-Ay25/35/42/50Vgk-Et1 Firmware: through 35.00
References
- https://jvn.jp/vu/JVNVU96767562/index.html
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-011_en.pdf
- https://jvn.jp/vu/JVNVU96767562/index.html
- https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-011_en.pdf
Get alerted when CVE-2022-33322 or the next vulnerability affects your stack