CVE-2026-5667: Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan Hm-01a-Ex

High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Packaged Air Conditioners (for Japan and outside Japan); Refrigerators (for Japan); Heat Pump Water Heaters / HEMS-Compatible Adapters / Wireless LAN Adapters (for Japan); Bathroom Dryer / Heater / Ventilation Systems (for Japan); Adapters for Airflow Ventilation Systems, Heat Pump Chilled / Hot Water Systems, and Ventilation / Air-Conditioning System Air Resorts (for Japan); Lossnay Central Ventilation Systems (for Japan); Smart Switches for Ventilation Fans and Lossnay (for Japan); IH Cooking Heaters (for Japan); and Rice Cookers (for Japan) allows an attacker within Wi-Fi radio range of an affected product to access the affected product using a hard-coded SSID and password, thereby obtaining device data such as operation status, room set temperature, and room temperature; changing the air-conditioner or Wi-Fi settings; or causing Wi-Fi communication to enter a denial-of-service (DoS) condition.

Affected products

Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan Hm-01a-Ex: up to and including 01.14
Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan P-01hma: up to and including 01.14
Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan P-HM02WA: up to and including 01.14
Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan P-HM03WA: up to and including 01.14
Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan P-HM04WA: up to and including 01.14
Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan P-HM05WA: up to and including 01.73
Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan P-WA01: up to and including 01.14
Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan P-WA02: up to and including 01.73
Mitsubishi Electric Corporation Adapters For Airflow Ventilation Systems, Heat Pump Chilled/hot Water Systems, And Ventilation/air-Conditioning System Air Resorts For Japan Vez-HM01WA: up to and including 01.14
Mitsubishi Electric Corporation Bathroom Dryer / Heater / Ventilation Systems For Japan V-241bz-Rc: up to and including 01.72
Mitsubishi Electric Corporation Bathroom Dryer / Heater / Ventilation Systems For Japan V-241bz5-Rc: up to and including 01.72
Mitsubishi Electric Corporation Bathroom Dryer / Heater / Ventilation Systems For Japan V-241bz5-Rc-Nr: up to and including 01.72
Mitsubishi Electric Corporation Bathroom Dryer / Heater / Ventilation Systems For Japan Wd-240dk-Rc: up to and including 01.72
Mitsubishi Electric Corporation Bathroom Dryer / Heater / Ventilation Systems For Japan Wd-240dk2-Rc: up to and including 01.72
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Gt-HEM4: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Gt-HR1: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Gt-HR2: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Gt-RA1: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Gt-RA2: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Rmcb-d6se-T: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Rmcb-d6se-T-Pv: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Rmcb-d7se: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Rmcb-f6se-T: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Rmcb-f7se: any version
Mitsubishi Electric Corporation Heat Pump Water Heaters / Hems-Compatible Adapters / Wireless Lan Adapters For Japan Rmcb-h6se-T: any version
and 2455 more

Published 2026-06-17. Last modified 2026-06-17.