Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy R
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious…
| Vendor | Product | Versions |
|---|---|---|
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FD40/56/63/71/8022S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | HXV25/28/40/56/63/71/8022S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | VXV40/56/63/71/8022S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZD25/28/40/56/63/71/8022(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FZ40/56/63/71/80/9021S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZW22/25/28/36/40/56/63/71/80/9021(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FZV40/56/63/71/80/9021S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZXV22/25/28/36/40/56/63/71/80/9021(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | EM22/25/28/36/40/56/63/71/80/9021E9(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FZ40/56/63/71/80/9020S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZW22/25/28/36/40/56/63/71/80/9020(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | FZV40/56/63/71/80/9020S — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | ZXV22/25/28/36/40/56/63/71/80/9020(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | EM22/25/28/36/40/56/63/71/80/9020E8(S) — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Wi | Fi Interface MAC-900IF — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Wi | Fi Interface PAC-SK43ML — versions 30.00 to 35.00 |
| Mitsubishi Electric Corporation | Refrigerator MR | MXD50/57G — versions 00.68 and prior |
| Mitsubishi Electric Corporation | Refrigerator MR | WXD52/60/70G — versions 00.68 and prior |
| Mitsubishi Electric Corporation | Refrigerator MR | WZ55/61H — versions 00.68 and prior |
| Mitsubishi Electric Corporation | Refrigerator MR | MZ54/60H — versions 00.68 and prior |
| Mitsubishi Electric Corporation | HEMS adapter GT | HEM4 — versions 00.83 and prior |
| Mitsubishi Electric Corporation | Wi | Fi Interface GT-RA1 — versions 00.83 and prior |
| Mitsubishi Electric Corporation | Wi | Fi Interface GT-RA2 — versions 00.83 and prior |
| Mitsubishi Electric Corporation | Wi | Fi Interface GT-HR1 — versions 00.83 and prior |
| Mitsubishi Electric Corporation | Remote control with Wi | Fi Interface RMCB-H6SE-T — versions 00.83 and prior |
| Mitsubishi Electric Corporation | Remote control with Wi | Fi Interface RMCB-F6SE-T — versions 00.83 and prior |
| Mitsubishi Electric Corporation | Remote control with Wi | Fi Interface RMCB-D6SE-T — versions 00.83 and prior |
| Mitsubishi Electric Corporation | BATHROOM THERMO VENTILATOR V | 241BZ-RC — versions 00.65 and prior |
| Mitsubishi Electric Corporation | BATHROOM THERMO VENTILATOR V | 241BZ5-RC — versions 00.65 and prior |
| Mitsubishi Electric Corporation | BATHROOM THERMO VENTILATOR WD | 240DK-RC — versions 00.65 and prior |
| Mitsubishi Electric Corporation | BATHROOM THERMO VENTILATOR WD | 240DK2-RC — versions 00.65 and prior |
| Mitsubishi Electric Corporation | Rice cooker NJ | AWBX10 — versions 00.75 and prior |
| Mitsubishi Electric Corporation | Mitsubishi Electric HEMS control adapter P | HM04WA — versions 00.67 and prior |
| Mitsubishi Electric Corporation | Wi | Fi Interface P-WA01 — versions 00.67 and prior |
| Mitsubishi Electric Corporation | Energy Recovery Ventilator VL | 200ZMHSV3-RC — versions 00.71 and prior |
| Mitsubishi Electric Corporation | Smart Switch P | 1600SWRC — versions 00.90 and prior |
| Mitsubishi Electric Corporation | Smart Switch P | 04SWRC — versions 00.90 and prior |
| Mitsubishi Electric Corporation | Smart Switch P | 10SWRC — versions 00.90 and prior |
| Mitsubishi Electric Corporation | Wi | Fi Interface MAC-587IF-E — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Wi | Fi Interface MAC-587IF2-E — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Wi | Fi Interface MAC-507IF-E — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Wi | Fi Interface MAC-588IF-E — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Wi | Fi Interface S-MAC-002IF — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Air Conditioning MSXY | FP05/07/10/13/18/20/24VGK-SG1 — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Air Conditioning MSY | GP10/13/15/18/20/24VFK-SG1 — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | AP25/35/42/50VGK-E1 — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | AP15/20/25/35/42/50/60/71VGK-E2 — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | AP25/35/42/50/60/71VGK-E3 — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | AP25/35/42/50VGK-E7 — Versions 35.00 and prior |
| Mitsubishi Electric Corporation | Air Conditioning MSZ | AP25/35/42/50VGK-E8 — Versions 35.00 and prior |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.