CVE-2022-33322: Mitsubishielectric Ma-EW85S-E Firmware

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

Affected products

• Mitsubishielectric Ma-EW85S-E Firmware: up to and including 80.00
• Mitsubishielectric Ma-EW85S-Uk Firmware: up to and including 80.00
• Mitsubishielectric Mac-507if-E Firmware: up to and including 35.00
• Mitsubishielectric Mac-587if-E Firmware: up to and including 35.00
• Mitsubishielectric Mac-587if2-E Firmware: up to and including 35.00
• Mitsubishielectric Mac-588if-E Firmware: up to and including 35.00
• Mitsubishielectric Mfz-GXT50/60/73VFK Firmware: up to and including 35.00
• Mitsubishielectric Mfz-XT50/60VFK Firmware: up to and including 35.00
• Mitsubishielectric Msxy-FP05/07/10/13/18/20/24VGK-SG1 Firmware: up to and including 35.00
• Mitsubishielectric Msy-GP10/13/15/18/20/24VFK-SG1 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP15/20/25/35/42/50/60/71VGK-e2 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP15/20/25/35/42/50/60/71VGK-ER2 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP15/20/25/35/42/50/60/71VGK-ET2 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP22/25/35/42/50/60/71/80VGKD-a2 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP22/25/35/42/50/61/70/80VGKD-a1 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50/60/71VGK-e3 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50/60/71VGK-ER3 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50/60/71VGK-ET3 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50VGK-e1 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50VGK-e7 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50VGK-e8 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50VGK-EN1 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50VGK-EN2 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50VGK-EN3 Firmware: up to and including 35.00
• Mitsubishielectric Msz-AP25/35/42/50VGK-ER1 Firmware: up to and including 35.00
• and 94 more

Published 2022-11-08. Last modified 2026-06-17.