CVE-2008-1546: Mitsubishi Electric Gb

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote attackers to cause a denial of service (air-conditioning outage) via an XML document containing a setRequest command.

Affected products

• Mitsubishi Electric Gb: version 50 only; version 50a only

Published 2008-03-28. Last modified 2026-06-16.