CVEvulnerability

CVE-2022-24296

7.5 HIGH Published 2022-06-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-327

Description

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.

Affected configurations

• mitsubishi ae-200a firmware (<= 7.97) • mitsubishi ae-200e firmware (<= 7.97) • mitsubishi ae-200j firmware (<= 7.97) • mitsubishi ae-50a firmware (<= 7.97) • mitsubishi ae-50e firmware (<= 7.97) • mitsubishi ae-50j firmware (<= 7.97) • mitsubishi ag-150a-a firmware (<= 3.21) • mitsubishi ag-150a-j firmware (<= 3.21) • mitsubishi eb-50gu-a firmware (<= 7.10) • mitsubishi eb-50gu-j firmware (<= 7.10) • mitsubishi ew-50a firmware (<= 7.97) • mitsubishi ew-50e firmware (<= 7.97) • mitsubishi ew-50j firmware (<= 7.97) • mitsubishi g-150ad firmware (<= 3.21) • mitsubishi gb-50a firmware (<= 3.21) • mitsubishi gb-50ada-a firmware (<= 3.21) • mitsubishi gb-50ada-j firmware (<= 3.21) • mitsubishi te-200a firmware (<= 7.97) • mitsubishi te-50a firmware (<= 7.97) • mitsubishi tw-50a firmware (<= 7.97)

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References