01 Record

CVE-2022-33321

Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR

CriticalPUBLISHEDCNA: Mitsubishi

CNA base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

1.00% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 62.8% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2022-11-08 00:00Z3 YR AGO

Last updated

2025-05-01 18:26Z1 YR AGO

Reserved

2022-06-14

Assigning CNA

Mitsubishi

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-319Cleartext Transmission of Sensitive InformationBase

Data version

5.1

Document digest

cffe3eb5a46c3c85e214498610ebb4411a36e0fcd5f514041d60ea3d23598106

05 Affected products

VendorProductVersionsPlatforms

Mitsubishi Electric CorporationPHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-Mall versions—

Mitsubishi Electric CorporationPHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-GW-Mall versions—

Mitsubishi Electric CorporationPHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-MRC-Mall versions—

Mitsubishi Electric CorporationPHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-Yall versions—

Mitsubishi Electric CorporationPHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-GW-Yall versions—

Mitsubishi Electric CorporationPHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-IFU-MRC-Yall versions—

Mitsubishi Electric CorporationHEMS adapter GT-HEM1all versions—

Mitsubishi Electric CorporationHEMS adapter GT-HEM2all versions—

Mitsubishi Electric CorporationHEMS adapter GT-HEM3all versions—

Mitsubishi Electric CorporationHEMS adapter GT-HEM3-Mall versions—

Mitsubishi Electric CorporationHEMS adapter P-01HMAall versions—

Mitsubishi Electric CorporationHEMS adapter P-HM02WAall versions—

Mitsubishi Electric CorporationHEMS adapter P-HM03WAall versions—

Mitsubishi Electric CorporationHEMS adapter VEZ-HM01WAall versions—

Mitsubishi Electric CorporationHEMS adapter HM-01A-CSall versions—

Mitsubishi Electric CorporationHEMS adapter HM-01A-EXall versions—

Mitsubishi Electric CorporationHEMS adapter HM-01A-VEHall versions—

Mitsubishi Electric CorporationHEMS adapter HM-02A-CSall versions—

Mitsubishi Electric CorporationHEMS adapter HM-02A-REFall versions—

Mitsubishi Electric CorporationHEMS adapter HM-02A-VEHall versions—

Mitsubishi Electric CorporationHEMS adapter HM-WF001all versions—

Mitsubishi Electric CorporationHEMS adapter HM-W002-ACall versions—

Mitsubishi Electric CorporationHEMS adapter HM-W002-ACBall versions—

Mitsubishi Electric CorporationWi-Fi Interface MAC-884IFall versions—

Mitsubishi Electric CorporationWi-Fi Interface MAC-888IFall versions—

Mitsubishi Electric CorporationAir Conditioning MSZ-EM22/25/28/36/40/56/63/71/80E2(S)all versions—

Mitsubishi Electric CorporationAir Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/90E3(S)all versions—

Mitsubishi Electric CorporationInduction hob CS-PT31HNWSR-Hall versions—

Mitsubishi Electric CorporationInduction hob G32MS-Hall versions—

Mitsubishi Electric CorporationInduction hob G32M-Hall versions—

Mitsubishi Electric CorporationMitsubishi Electric HEMS Energy Measurement Unit HM-EM02all versions—

Mitsubishi Electric CorporationMitsubishi Electric HEMS Energy Measurement Unit HM-EM03-Wall versions—

Mitsubishi Electric CorporationWi-Fi Interface MAC-895IFall versions—

Mitsubishi Electric CorporationAir Conditioning MSZ-FD40/56/63/71/8022Sversions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-HXV25/28/40/56/63/71/8022Sversions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-VXV40/56/63/71/8022Sversions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-ZD25/28/40/56/63/71/8022(S)versions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-FZ40/56/63/71/80/9021Sversions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9021(S)versions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-FZV40/56/63/71/80/9021Sversions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S)versions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9021E9(S)versions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-FZ40/56/63/71/80/9020Sversions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S)versions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-FZV40/56/63/71/80/9020Sversions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S)versions 30.00 to 35.00—

Mitsubishi Electric CorporationAir Conditioning MSZ-EM22/25/28/36/40/56/63/71/80/9020E8(S)versions 30.00 to 35.00—

Mitsubishi Electric CorporationWi-Fi Interface MAC-900IFversions 30.00 to 35.00—

Mitsubishi Electric CorporationWi-Fi Interface PAC-SK43MLversions 30.00 to 35.00—

Mitsubishi Electric CorporationRefrigerator MR-MXD50/57Gversions 00.68 and prior—

Mitsubishi Electric CorporationRefrigerator MR-WXD52/60/70Gversions 00.68 and prior—

Mitsubishi Electric CorporationRefrigerator MR-WZ55/61Hversions 00.68 and prior—

Mitsubishi Electric CorporationRefrigerator MR-MZ54/60Hversions 00.68 and prior—

Mitsubishi Electric CorporationHEMS adapter GT-HEM4versions 00.83 and prior—

Mitsubishi Electric CorporationWi-Fi Interface GT-RA1versions 00.83 and prior—

Mitsubishi Electric CorporationWi-Fi Interface GT-RA2versions 00.83 and prior—

Mitsubishi Electric CorporationWi-Fi Interface GT-HR1versions 00.83 and prior—

Mitsubishi Electric CorporationRemote control with Wi-Fi Interface RMCB-H6SE-Tversions 00.83 and prior—

Mitsubishi Electric CorporationRemote control with Wi-Fi Interface RMCB-F6SE-Tversions 00.83 and prior—

Mitsubishi Electric CorporationRemote control with Wi-Fi Interface RMCB-D6SE-Tversions 00.83 and prior—

140 further entries not shown. The complete list is in the raw JSON document.

06 References

jvn.jphttps://jvn.jp/vu/JVNVU96767562/index.htmlgovernment-resource
www.mitsubishielectric.comhttps://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-010_en.pdfvendor-advisory
www.mitsubishielectric.co.jphttps://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-010.pdfvendor-advisory