Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HE

Summary

Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

Timeline

1. Nov 8, 2022, 12:00 AM UTCCVE published
2. May 1, 2025, 2:37 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. May 1, 2025, 2:38 PM UTCRecord last updated

Affected versions

• Mitsubishi Electric Corporation Air Conditioning MSZ-FD40/56/63/71/8022S

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-HXV25/28/40/56/63/71/8022S

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-VXV40/56/63/71/8022S

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-ZD25/28/40/56/63/71/8022(S)

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-FZ40/56/63/71/80/9021S

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9021(S)

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-FZV40/56/63/71/80/9021S

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S)

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9021E9(S)

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-FZ40/56/63/71/80/9020S

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S)

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-FZV40/56/63/71/80/9020S

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S)

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9020E8(S)

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Wi-Fi Interface MAC-900IF

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Wi-Fi Interface PAC-SK43ML

  versions 30.00 to 35.00

• Mitsubishi Electric Corporation Refrigerator MR-MXD50/57G

  Version range not reported

• Mitsubishi Electric Corporation Refrigerator MR-WXD52/60/70G

  Version range not reported

• Mitsubishi Electric Corporation Refrigerator MR-WZ55/61H

  Version range not reported

• Mitsubishi Electric Corporation Refrigerator MR-MZ54/60H

  Version range not reported

• Mitsubishi Electric Corporation HEMS adapter GT-HEM4

  Version range not reported

• Mitsubishi Electric Corporation Wi-Fi Interface GT-RA1

  Version range not reported

• Mitsubishi Electric Corporation Wi-Fi Interface GT-RA2

  Version range not reported

• Mitsubishi Electric Corporation Wi-Fi Interface GT-HR1

  Version range not reported

• Mitsubishi Electric Corporation Remote control with Wi-Fi Interface RMCB-H6SE-T

  Version range not reported

• Mitsubishi Electric Corporation Remote control with Wi-Fi Interface RMCB-F6SE-T

  Version range not reported

• Mitsubishi Electric Corporation Remote control with Wi-Fi Interface RMCB-D6SE-T

  Version range not reported

• Mitsubishi Electric Corporation BATHROOM THERMO VENTILATOR V-241BZ-RC

  Version range not reported

• Mitsubishi Electric Corporation BATHROOM THERMO VENTILATOR V-241BZ5-RC

  Version range not reported

• Mitsubishi Electric Corporation BATHROOM THERMO VENTILATOR WD-240DK-RC

  Version range not reported

• Mitsubishi Electric Corporation BATHROOM THERMO VENTILATOR WD-240DK2-RC

  Version range not reported

• Mitsubishi Electric Corporation Rice cooker NJ-AWBX10

  Version range not reported

• Mitsubishi Electric Corporation Mitsubishi Electric HEMS control adapter P-HM04WA

  Version range not reported

• Mitsubishi Electric Corporation Wi-Fi Interface P-WA01

  Version range not reported

• Mitsubishi Electric Corporation Energy Recovery Ventilator VL-200ZMHSV3-RC

  Version range not reported

• Mitsubishi Electric Corporation Smart Switch P-1600SWRC

  Version range not reported

• Mitsubishi Electric Corporation Smart Switch P-04SWRC

  Version range not reported

• Mitsubishi Electric Corporation Smart Switch P-10SWRC

  Version range not reported

• Mitsubishi Electric Corporation Wi-Fi Interface MAC-587IF-E

  Version range not reported

• Mitsubishi Electric Corporation Wi-Fi Interface MAC-587IF2-E

  Version range not reported

• Mitsubishi Electric Corporation Wi-Fi Interface MAC-507IF-E

  Version range not reported

• Mitsubishi Electric Corporation Wi-Fi Interface MAC-588IF-E

  Version range not reported

• Mitsubishi Electric Corporation Wi-Fi Interface S-MAC-002IF

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSXY-FP05/07/10/13/18/20/24VGK-SG1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSY-GP10/13/15/18/20/24VFK-SG1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-E1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50/60/71VGK-E3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-E7

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-E8

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-EN1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-EN2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-EN3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-ER1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ER2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ER3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ET2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ET3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-E1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-E6

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-ER1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-SC1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGKP-E6

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGKP-ER1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGKP-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGKP-SC1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-E1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-E3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ER1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ER2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ET2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ET3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-E1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-SC1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-SC2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-HR25/35/42/50/60/71VFK-E1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-HR25/35/42/50VFK-E6

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-HR25/35/42/50/60/71VFK-ER1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-HR25/35/42/50/60/71VFK-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2W-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2W-E3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2W-EN2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2W-ER2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2W-ER3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2W-ET2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2W-ET3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2V-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2V-E3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2V-EN2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-ER2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-ER3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-ET2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-ET3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2B-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2B-E3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2B-EN2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-ER2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-ER3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-ET2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-ET3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2R-E2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2R-E3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2R-EN2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-ER2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-ER3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-ET2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-ET3

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50VG2W-SC1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2V-SC1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2B-SC1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2R-SC1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-RW25/35/50VG-E1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-RW25/35/50VG-ER1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-RW25/35/50VG-ET1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-RW25/35/50VG-SC1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP22/25/35/42/50/61/70/80VGKD-A1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-AP22/25/35/42/50/60/71/80VGKD-A2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-A1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-A1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-A1

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-A2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-A2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-A2

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MFZ-GXT50/60/73VFK

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MFZ-XT50/60VFK

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EZA09/12VAK

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-EXA09/12VAK

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-GZY09/12/18VFK

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-KY09/12/18VFK

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-WX18/20/25VFK

  Version range not reported

• Mitsubishi Electric Corporation Air Conditioning MSZ-ZY09/12/18VFK

  Version range not reported

• Mitsubishi Electric Corporation Air Purifier MA-EW85S-E

  Version range not reported

• Mitsubishi Electric Corporation Air Purifier MA-EW85S-UK

  Version range not reported

References 3