Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mi
Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO…
| Vendor | Product | Versions |
|---|---|---|
| Mitsubishi Electric Corporation | PHOTOVOLTAIC COLOR MONITOR ECO | GUIDE PV-DR006L-SET-M — all versions |
| Mitsubishi Electric Corporation | PHOTOVOLTAIC COLOR MONITOR ECO | GUIDE PV-DR006L-IFU-GW-M — all versions |
| Mitsubishi Electric Corporation | PHOTOVOLTAIC COLOR MONITOR ECO | GUIDE PV-DR006L-IFU-MRC-M — all versions |
| Mitsubishi Electric Corporation | PHOTOVOLTAIC COLOR MONITOR ECO | GUIDE PV-DR006L-SET-Y — all versions |
| Mitsubishi Electric Corporation | PHOTOVOLTAIC COLOR MONITOR ECO | GUIDE PV-DR006L-IFU-GW-Y — all versions |
| Mitsubishi Electric Corporation | PHOTOVOLTAIC COLOR MONITOR ECO | GUIDE PV-DR006L-IFU-MRC-Y — all versions |
| Mitsubishi Electric Corporation | HEMS adapter GT | HEM1 — all versions |
| Mitsubishi Electric Corporation | HEMS adapter GT | HEM2 — all versions |
| Mitsubishi Electric Corporation | HEMS adapter GT | HEM3 — all versions |
| Mitsubishi Electric Corporation | HEMS adapter GT | HEM3-M — all versions |
| Mitsubishi Electric Corporation | HEMS adapter P | 01HMA — all versions |
| Mitsubishi Electric Corporation | HEMS adapter P | HM02WA — all versions |
| Mitsubishi Electric Corporation | HEMS adapter P | HM03WA — all versions |
| Mitsubishi Electric Corporation | HEMS adapter VEZ | HM01WA — all versions |
| Mitsubishi Electric Corporation | HEMS adapter HM | 01A-CS — all versions |
| Mitsubishi Electric Corporation | HEMS adapter HM | 01A-EX — all versions |
| Mitsubishi Electric Corporation | HEMS adapter HM | 01A-VEH — all versions |
| Mitsubishi Electric Corporation | HEMS adapter HM | 02A-CS — all versions |
| Mitsubishi Electric Corporation | HEMS adapter HM | 02A-REF — all versions |
| Mitsubishi Electric Corporation | HEMS adapter HM | 02A-VEH — all versions |
| Mitsubishi Electric Corporation | HEMS adapter HM | WF001 — all versions |
| Mitsubishi Electric Corporation | HEMS adapter HM | W002-AC — all versions |
| Mitsubishi Electric Corporation | HEMS adapter HM | W002-ACB — all versions |
| Mitsubishi Electric Corporation | Wi | Fi Interface MAC-884IF — all versions |
| Mitsubishi Electric Corporation | Wi | Fi Interface MAC-888IF — all versions |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | EM22/25/28/36/40/56/63/71/80E2(S) — all versions |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | EM22/25/28/36/40/56/63/71/80/90E3(S) — all versions |
| Mitsubishi Electric Corporation | Induction hob CS | PT31HNWSR-H — all versions |
| Mitsubishi Electric Corporation | Induction hob G32MS | H — all versions |
| Mitsubishi Electric Corporation | Induction hob G32M | H — all versions |
| Mitsubishi Electric Corporation | Mitsubishi Electric HEMS Energy Measurement Unit HM | EM02 — all versions |
| Mitsubishi Electric Corporation | Mitsubishi Electric HEMS Energy Measurement Unit HM | EM03-W — all versions |
| Mitsubishi Electric Corporation | Wi | Fi Interface MAC-895IF — all versions |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FD40/56/63/71/8022S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | HXV25/28/40/56/63/71/8022S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | VXV40/56/63/71/8022S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZD25/28/40/56/63/71/8022(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FZ40/56/63/71/80/9021S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZW22/25/28/36/40/56/63/71/80/9021(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FZV40/56/63/71/80/9021S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZXV22/25/28/36/40/56/63/71/80/9021(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | EM22/25/28/36/40/56/63/71/80/9021E9(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FZ40/56/63/71/80/9020S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZW22/25/28/36/40/56/63/71/80/9020(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FZV40/56/63/71/80/9020S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZXV22/25/28/36/40/56/63/71/80/9020(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | EM22/25/28/36/40/56/63/71/80/9020E8(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Wi | Fi Interface MAC-900IF — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Wi | Fi Interface PAC-SK43ML — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Refrigerator MR | MXD50/57G — versions 00.68 and prior |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.