CVE-2022-24296

Published: Jun 8, 2022Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.

Affected (20)

Products: Mitsubishi: Ae 200a Firmware, Ae 200e Firmware, Ae 200j Firmware, Ae 50a Firmware, Ae 50e Firmware, Ae 50j Firmware, Ag 150a A Firmware, Ag 150a J Firmware, Eb 50gu A Firmware, Eb 50gu J Firmware, Ew 50a Firmware, Ew 50e Firmware, Ew 50j Firmware, G 150ad Firmware, Gb 50a Firmware, Gb 50ada A Firmware, Gb 50ada J Firmware, Te 200a Firmware, Te 50a Firmware, Tw 50a Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ae 200a Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Ae 200a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ae 200e Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Ae 200e	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ae 200j Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Ae 200j	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ae 50a Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Ae 50a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ae 50e Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Ae 50e	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ae 50j Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Ae 50j	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ag 150a A Firmware	Up to 3.21

Running on/with	Platform Versions
Mitsubishi Ag 150a A	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ag 150a J Firmware	Up to 3.21

Running on/with	Platform Versions
Mitsubishi Ag 150a J	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Eb 50gu A Firmware	Up to 7.10

Running on/with	Platform Versions
Mitsubishi Eb 50gu A	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Eb 50gu J Firmware	Up to 7.10

Running on/with	Platform Versions
Mitsubishi Eb 50gu J	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ew 50a Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Ew 50a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ew 50e Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Ew 50e	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Ew 50j Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Ew 50j	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi G 150ad Firmware	Up to 3.21

Running on/with	Platform Versions
Mitsubishi G 150ad	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Gb 50a Firmware	Up to 3.21

Running on/with	Platform Versions
Mitsubishi Gb 50a	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Gb 50ada A Firmware	Up to 3.21

Running on/with	Platform Versions
Mitsubishi Gb 50ada A	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Gb 50ada J Firmware	Up to 3.21

Running on/with	Platform Versions
Mitsubishi Gb 50ada J	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Te 200a Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Te 200a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Te 50a Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Te 50a	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishi Tw 50a Firmware	Up to 7.97

Running on/with	Platform Versions
Mitsubishi Tw 50a	All versions

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (6)

https://jvn.jp/vu/JVNVU95298925/index.html

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party Advisory

https://www.mee.co.jp/psirt/vulnerability/pdf/2022-001.pdf

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Third Party Advisory

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-005_en.pdf

Source: Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp

Vendor Advisory

https://jvn.jp/vu/JVNVU95298925/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.mee.co.jp/psirt/vulnerability/pdf/2022-001.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-005_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.