Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Mitsubishi Electric Air Conditioning Systems (Update B)

🗓️ 26 Jun 2025 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType 
ics
 ics🔗 www.cisa.gov👁 11 Views

Vulnerability allows control of Mitsubishi Electric air conditioning systems; CISA recommends defensive measures.

Related
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of Mitsubishi Electric’s air conditioning system, related to the lack of authentication for a critical function, allows a perpetrator to control the air conditioning system.
9 Jan 202600:00
–bdu_fstec
Circl		CVE-2025-3699
26 Jun 202510:00
–circl
CNNVD		Mitsubishi Electric多款产品 访问控制错误漏洞
26 Jun 202500:00
–cnnvd
CVE		CVE-2025-3699
26 Jun 202522:40
–cve
Cvelist		CVE-2025-3699
26 Jun 202522:40
–cvelist
EUVD		EUVD-2025-19244
3 Oct 202520:07
–euvd
NVD		CVE-2025-3699
26 Jun 202523:15
–nvd
Positive Technologies		PT-2025-27019
26 Jun 202500:00
–ptsecurity
RedhatCVE		CVE-2025-3699
28 Jun 202523:07
–redhatcve
Vulnrichment		CVE-2025-3699
26 Jun 202522:40
–vulnrichment
Rows per page
SourceLink
rawwww.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-177-01.json
cisawww.cisa.gov/news-events/ics-advisories/icsa-25-177-01
cisawww.cisa.gov/resources-tools/resources/ics-recommended-practices
cisawww.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisawww.cisa.gov/topics/industrial-control-systems
cisawww.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
cisawww.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisawww.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b
cisawww.cisa.gov/secure-our-world/teach-employees-avoid-phishing
cisawww.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
26 Jun 2025 06:00Current
7.7High risk
Vulners AI Score7.7
CVSS 3.19.8
EPSS0.0109
SSVC
vulnerability exploitationcisa recommendationsauthentication bypassindustrial control systemscybersecurity strategies
11