CVE-2022-33322

Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

• mitsubishielectric mac-587if-e firmware (<= 35.00) • mitsubishielectric mac-587if2-e firmware (<= 35.00) • mitsubishielectric mac-507if-e firmware (<= 35.00) • mitsubishielectric mac-588if-e firmware (<= 35.00) • mitsubishielectric s-mac-002if firmware (<= 35.00) • mitsubishielectric ma-ew85s-e firmware (<= 80.00) • mitsubishielectric ma-ew85s-uk firmware (<= 80.00) • mitsubishielectric mfz-gxt50\/60\/73vfk firmware (<= 35.00) • mitsubishielectric mfz-xt50\/60vfk firmware (<= 35.00) • mitsubishielectric msxy-fp05\/07\/10\/13\/18\/20\/24vgk-sg1 firmware (<= 35.00) • mitsubishielectric msy-gp10\/13\/15\/18\/20\/24vfk-sg1 firmware (<= 35.00) • mitsubishielectric msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-e2 firmware (<= 35.00) • mitsubishielectric msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-er2 firmware (<= 35.00) • mitsubishielectric msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-et2 firmware (<= 35.00) • mitsubishielectric msz-ap22\/25\/35\/42\/50\/60\/71\/80vgkd-a2 firmware (<= 35.00) • mitsubishielectric msz-ap22\/25\/35\/42\/50\/61\/70\/80vgkd-a1 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50\/60\/71vgk-e3 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50\/60\/71vgk-er3 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50\/60\/71vgk-et3 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50vgk-e1 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50vgk-e7 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50vgk-e8 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50vgk-en1 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50vgk-en2 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50vgk-en3 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50vgk-er1 firmware (<= 35.00) • mitsubishielectric msz-ap25\/35\/42\/50vgk-et1 firmware (<= 35.00) • mitsubishielectric msz-ay25\/35\/42\/50vgk-e1 firmware (<= 35.00) • mitsubishielectric msz-ay25\/35\/42\/50vgk-e6 firmware (<= 35.00) • mitsubishielectric msz-ay25\/35\/42\/50vgk-er1 firmware (<= 35.00) • mitsubishielectric msz-ay25\/35\/42\/50vgk-et1 firmware (<= 35.00) • mitsubishielectric msz-ay25\/35\/42\/50vgk-sc1 firmware (<= 35.00) • mitsubishielectric msz-ay25\/35\/42\/50vgkp-e6 firmware (<= 35.00) • mitsubishielectric msz-ay25\/35\/42\/50vgkp-er1 firmware (<= 35.00) • mitsubishielectric msz-ay25\/35\/42\/50vgkp-et1 firmware (<= 35.00) • mitsubishielectric msz-ay25\/35\/42\/50vgkp-sc1 firmware (<= 35.00) • mitsubishielectric msz-bt20\/25\/35\/50vgk-e1 firmware (<= 35.00) • mitsubishielectric msz-bt20\/25\/35\/50vgk-e2 firmware (<= 35.00) • mitsubishielectric msz-bt20\/25\/35\/50vgk-e3 firmware (<= 35.00) • mitsubishielectric msz-bt20\/25\/35\/50vgk-er1 firmware (<= 35.00) • mitsubishielectric msz-bt20\/25\/35\/50vgk-er2 firmware (<= 35.00) • mitsubishielectric msz-bt20\/25\/35\/50vgk-et1 firmware (<= 35.00) • mitsubishielectric msz-bt20\/25\/35\/50vgk-et2 firmware (<= 35.00) • mitsubishielectric msz-bt20\/25\/35\/50vgk-et3 firmware (<= 35.00) • mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgkb-e1 firmware (<= 35.00) • mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgkb-e2 firmware (<= 35.00) • mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgks-e1 firmware (<= 35.00) • mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgks-e2 firmware (<= 35.00) • mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgkw-e1 firmware (<= 35.00) • mitsubishielectric msz-ef18\/22\/25\/35\/42\/50vgkw-e2 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-a1 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-er1 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-er2 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-et1 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgkb-et2 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-a1 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-er1 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-er2 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-et1 firmware (<= 35.00) • mitsubishielectric msz-ef22\/25\/35\/42\/50vgks-et2 firmware (<= 35.00) … and 59 more