Lucene search

[email protected]NVD:CVE-2022-24296

HistoryJun 08, 2022 - 3:15 p.m.

CVE-2022-24296

2022-06-0815:15:07

CWE-327

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

58.7%

JSON

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.

Affected configurations

NVD

Node

mitsubishiae-200a_firmwareRange≤7.97

AND

mitsubishiae-200aMatch-

Node

mitsubishiae-200e_firmwareRange≤7.97

AND

mitsubishiae-200eMatch-

Node

mitsubishiae-200j_firmwareRange≤7.97

AND

mitsubishiae-200jMatch-

Node

mitsubishiae-50a_firmwareRange≤7.97

AND

mitsubishiae-50aMatch-

Node

mitsubishiae-50e_firmwareRange≤7.97

AND

mitsubishiae-50eMatch-

Node

mitsubishiae-50j_firmwareRange≤7.97

AND

mitsubishiae-50jMatch-

Node

mitsubishiag-150a-a_firmwareRange≤3.21

AND

mitsubishiag-150a-aMatch-

Node

mitsubishiag-150a-j_firmwareRange≤3.21

AND

mitsubishiag-150a-jMatch-

Node

mitsubishieb-50gu-a_firmwareRange≤7.10

AND

mitsubishieb-50gu-aMatch-

Node

mitsubishieb-50gu-j_firmwareRange≤7.10

AND

mitsubishieb-50gu-jMatch-

Node

mitsubishiew-50a_firmwareRange≤7.97

AND

mitsubishiew-50aMatch-

Node

mitsubishiew-50e_firmwareRange≤7.97

AND

mitsubishiew-50eMatch-

Node

mitsubishiew-50j_firmwareRange≤7.97

AND

mitsubishiew-50jMatch-

Node

mitsubishig-150ad_firmwareRange≤3.21

AND

mitsubishig-150adMatch-

Node

mitsubishigb-50a_firmwareRange≤3.21

AND

mitsubishigb-50aMatch-

Node

mitsubishigb-50ada-a_firmwareRange≤3.21

AND

mitsubishigb-50ada-aMatch-

Node

mitsubishigb-50ada-j_firmwareRange≤3.21

AND

mitsubishigb-50ada-jMatch-

Node

mitsubishite-200a_firmwareRange≤7.97

AND

mitsubishite-200aMatch-

Node

mitsubishite-50a_firmwareRange≤7.97

AND

mitsubishite-50aMatch-

Node

mitsubishitw-50a_firmwareRange≤7.97

AND

mitsubishitw-50aMatch-

References

jvn.jp/vu/JVNVU95298925/index.html

www.mee.co.jp/psirt/vulnerability/pdf/2022-001.pdf

www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-005_en.pdf

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

58.7%

JSON

Related for NVD:CVE-2022-24296

prion1 cve1 cvelist1 ics1