CVE-2022-24296: Mitsubishi Ae-200a Firmware
High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.
Affected products
- Mitsubishi Ae-200a Firmware: up to and including 7.97
- Mitsubishi Ae-200e Firmware: up to and including 7.97
- Mitsubishi Ae-200j Firmware: up to and including 7.97
- Mitsubishi Ae-50a Firmware: up to and including 7.97
- Mitsubishi Ae-50e Firmware: up to and including 7.97
- Mitsubishi Ae-50j Firmware: up to and including 7.97
- Mitsubishi AG-150a-A Firmware: up to and including 3.21
- Mitsubishi AG-150a-J Firmware: up to and including 3.21
- Mitsubishi Eb-50gu-A Firmware: up to and including 7.10
- Mitsubishi Eb-50gu-J Firmware: up to and including 7.10
- Mitsubishi Ew-50a Firmware: up to and including 7.97
- Mitsubishi Ew-50e Firmware: up to and including 7.97
- Mitsubishi Ew-50j Firmware: up to and including 7.97
- Mitsubishi G-150ad Firmware: up to and including 3.21
- Mitsubishi Gb-50a Firmware: up to and including 3.21
- Mitsubishi Gb-50ada-A Firmware: up to and including 3.21
- Mitsubishi Gb-50ada-J Firmware: up to and including 3.21
- Mitsubishi Te-200a Firmware: up to and including 7.97
- Mitsubishi Te-50a Firmware: up to and including 7.97
- Mitsubishi Tw-50a Firmware: up to and including 7.97
Published 2022-06-08. Last modified 2026-06-17.