Mitsubishielectric Msz-GZY09/12/18VFK Firmware vulnerabilities

2 CVEs affecting Mitsubishielectric Msz-GZY09/12/18VFK Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-33322, published 2022-11-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-33321, published 2022-11-08. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR…
CVE-2022-33322, published 2022-11-08. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM…