CVE-2021-20595

🗓️ 13 Jul 2021 10:54:01Reported by MitsubishiType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 46 Views

CVE-2021-20595: Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controller

Reporter	Title	Published	Views	Family All 7
CNNVD	Mitsubishi Electric Air Conditioning Systems 代码问题漏洞	1 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-20595	13 Jul 202110:54	–	cvelist
EUVD	EUVD-2021-8013	3 Oct 202520:07	–	euvd
ICS	Mitsubishi Electric Air Conditioning Systems	1 Jul 202100:00	–	ics
NVD	CVE-2021-20595	13 Jul 202111:15	–	nvd
Prion	Xxe	13 Jul 202111:15	–	prion
RedhatCVE	CVE-2021-20595	22 May 202520:59	–	redhatcve

NVD

Node

mitsubishi g-50a_firmwareRange2.50–3.35

AND

mitsubishi g-50aMatch-

Node

mitsubishi gb-50a_firmwareRange2.50–3.35

AND

mitsubishi gb-50aMatch-

Node

mitsubishi ag-150a-a_firmwareRange≤3.20

AND

mitsubishi ag-150a-aMatch-

Node

mitsubishi ag-150a-j_firmwareRange≤3.20

AND

mitsubishi ag-150a-jMatch-

Node

mitsubishi gb-50ada-a_firmwareRange≤3.20

AND

mitsubishi gb-50ada-aMatch-

Node

mitsubishi gb-50ada-j_firmwareRange≤3.20

AND

mitsubishi gb-50ada-jMatch-

Node

mitsubishi eb-50gu-a_firmwareRange≤7.09

AND

mitsubishi eb-50gu-aMatch-

Node

mitsubishi eb-50gu-j_firmwareRange≤7.09

AND

mitsubishi eb-50gu-jMatch-

Node

mitsubishi ae-200a_firmwareRange≤7.93

AND

mitsubishi ae-200aMatch-

Node

mitsubishi ae-200e_firmwareRange≤7.93

AND

mitsubishi ae-200eMatch-

Node

mitsubishi ae-50a_firmwareRange≤7.93

AND

mitsubishi ae-50aMatch-

Node

mitsubishi ae-50e_firmwareRange≤7.93

AND

mitsubishi ae-50eMatch-

Node

mitsubishi ew-50a_firmwareRange≤7.93

AND

mitsubishi ew-50aMatch-

Node

mitsubishi ew-50e_firmwareRange≤7.93

AND

mitsubishi ew-50eMatch-

Node

mitsubishi te-200a_firmwareRange≤7.93

AND

mitsubishi te-200aMatch-

Node

mitsubishi te-50a_firmwareRange≤7.93

AND

mitsubishi te-50aMatch-

Node

mitsubishi tw-50a_firmwareRange≤7.93

AND

mitsubishi tw-50aMatch-

Node

mitsubishi cms-rmd-j_firmwareRange≤1.30

AND

mitsubishi cms-rmd-jMatch-

Node

mitsubishi pac-yg50eca_firmwareRange≤2.20

AND

mitsubishi pac-yg50ecaMatch-

[
  {
    "product": "Air Conditioning System/Centralized Controllers G-50A; GB-50A; GB-24A; AG-150A-A; AG-150A-J; GB-50ADA-A; GB-50ADA-J; EB-50GU-A; EB-50GU-J; AE-200A; AE-200E; AE-50A; AE-50E; EW-50A; EW-50E; TE-200A; TE-50A; TW-50A; CMS-RMD-J; Air Conditioning System/Expansion Controllers PAC-YG50ECA; Air Conditioning System/BM adapter BAC-HD150",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Ver.3.35 and prior"
      },
      {
        "status": "affected",
        "version": "Ver.9.11 and prior"
      },
      {
        "status": "affected",
        "version": "Ver.3.20 and prior"
      },
      {
        "status": "affected",
        "version": "Ver 7.09 and prior"
      },
      {
        "status": "affected",
        "version": "Ver 7.93 and prior"
      },
      {
        "status": "affected",
        "version": "Ver.1.30 and prior"
      },
      {
        "status": "affected",
        "version": "Ver.2.20 and prior"
      },
      {
        "status": "affected",
        "version": "Ver.2.21 and prior"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU93086468/index.html
mitsubishielectric	www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-005_en.pdf

21 Nov 2024 05:46Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.2

CVSS 28.5

EPSS0.00154

CWE-611