{"cve":"CVE-2022-33321","nvd":{"published":"2022-11-08T20:15:10.080","modified":"2026-06-17T04:49:06.233","status":"Modified","description":"Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch, Ventilating Fan, Range hood fan, Energy Measurement Unit and Air Purifier) allows a remote unauthenticated attacker to disclose information in the products or cause a denial of service (DoS) condition as a result by sniffing credential information (username and password).\nThe wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability.\nAs for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-319"],"references":["https://jvn.jp/vu/JVNVU96767562/index.html","https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-010.pdf","https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-010_en.pdf","https://jvn.jp/vu/JVNVU96767562/index.html","https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-010.pdf"],"products":["mitsubishielectric:ma-ew85s-e_firmware","mitsubishielectric:ma-ew85s-uk_firmware","mitsubishielectric:mac-507if-e_firmware","mitsubishielectric:mac-557if-e1_firmware","mitsubishielectric:mac-557if-e_firmware","mitsubishielectric:mac-558if-e1_firmware","mitsubishielectric:mac-558if-e_firmware","mitsubishielectric:mac-559if-e1_firmware","mitsubishielectric:mac-559if-e_firmware","mitsubishielectric:mac-566ifb-e_firmware","mitsubishielectric:mac-567ifb-e_firmware","mitsubishielectric:mac-567ifb2-e_firmware","mitsubishielectric:mac-568if-e_firmware","mitsubishielectric:mac-568ifb-e_firmware","mitsubishielectric:mac-568ifb2-e_firmware","mitsubishielectric:mac-568ifb3-e_firmware","mitsubishielectric:mac-576if-e1_firmware","mitsubishielectric:mac-587if-e_firmware","mitsubishielectric:mac-587if2-e_firmware","mitsubishielectric:mac-588if-e_firmware","mitsubishielectric:mfz-gxt50\\/60\\/73vfk_firmware","mitsubishielectric:mfz-xt50\\/60vfk_firmware","mitsubishielectric:msxy-fp05\\/07\\/10\\/13\\/18\\/20\\/24vgk-sg1_firmware","mitsubishielectric:msy-gp10\\/13\\/15\\/18\\/20\\/24vfk-sg1_firmware","mitsubishielectric:msz-ap15\\/20\\/25\\/35\\/42\\/50\\/60\\/71vgk-e2_firmware","mitsubishielectric:msz-ap15\\/20\\/25\\/35\\/42\\/50\\/60\\/71vgk-er2_firmware","mitsubishielectric:msz-ap15\\/20\\/25\\/35\\/42\\/50\\/60\\/71vgk-et2_firmware","mitsubishielectric:msz-ap22\\/25\\/35\\/42\\/50\\/60\\/71\\/80vgkd-a2_firmware","mitsubishielectric:msz-ap22\\/25\\/35\\/42\\/50\\/61\\/70\\/80vgkd-a1_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50\\/60\\/71vgk-e3_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50\\/60\\/71vgk-er3_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50\\/60\\/71vgk-et3_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-e1_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-e6_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-e7_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-e8_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-en1_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-en2_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-en3_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-er1_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-et1_firmware","mitsubishielectric:msz-ap60\\/71vgk-e1_firmware","mitsubishielectric:msz-ap60\\/71vgk-er1_firmware","mitsubishielectric:msz-ap60\\/71vgk-et1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-e1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-e6_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-er1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-et1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-sc1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgkp-e6_firmware"],"source":"nvd","synced_at":"2026-10-19T21:37:08.729216836+00:00"},"epss":{"cve":"CVE-2022-33321","score":0.01008,"percentile":0.63076,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}