Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-33321
HistoryNov 08, 2022 - 8:15 p.m.

CVE-2022-33321

2022-11-0820:15:00
CWE-319
[email protected]
web.nvd.nist.gov
35
5
cve-2022-33321
mitsubishi electric
consumer electronics
clear text transmission
basic authentication
http connections
vulnerability
security
information disclosure

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.9%

JSON

Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch, Ventilating Fan, Range hood fan, Energy Measurement Unit and Air Purifier) allows a remote unauthenticated attacker to disclose information in the products or cause a denial of service (DoS) condition as a result by sniffing credential information (username and password).
The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability.
As for the affected product models/versions, see the Mitsubishi Electric’s advisory which is listed in [References] section.

CPENameOperatorVersion
mitsubishielectric:mac-557if-e_firmwaremitsubishielectric mac-557if-e firmwareeq*
mitsubishielectric:mac-557if-e1_firmwaremitsubishielectric mac-557if-e1 firmwareeq*
mitsubishielectric:pac-wf010-e_firmwaremitsubishielectric pac-wf010-e firmwareeq*
mitsubishielectric:mac-566ifb-e_firmwaremitsubishielectric mac-566ifb-e firmwareeq*
mitsubishielectric:mac-576if-e1_firmwaremitsubishielectric mac-576if-e1 firmwareeq*
mitsubishielectric:mac-567ifb-e_firmwaremitsubishielectric mac-567ifb-e firmwareeq*
mitsubishielectric:mac-567ifb2-e_firmwaremitsubishielectric mac-567ifb2-e firmwareeq*
mitsubishielectric:mac-558if-e_firmwaremitsubishielectric mac-558if-e firmwareeq*
mitsubishielectric:mac-558if-e1_firmwaremitsubishielectric mac-558if-e1 firmwareeq*
mitsubishielectric:mac-559if-e_firmwaremitsubishielectric mac-559if-e firmwareeq*
Rows per page:
1-10 of 1781

Social References

More

Related

prion 1
cvelist 1
prion
prion
Design/Logic Flaw
2022-11-08 20:15:00
cvelist
cvelist
CVE-2022-33321
2022-11-08 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.9%

JSON
Related for CVE-2022-33321
prion1cvelist1