{"cve":"CVE-2022-33322","nvd":{"published":"2022-11-08T20:15:11.017","modified":"2026-06-17T04:49:06.660","status":"Modified","description":"Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","score":6.1},"cwes":["CWE-79"],"references":["https://jvn.jp/vu/JVNVU96767562/index.html","https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf","https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-011_en.pdf","https://jvn.jp/vu/JVNVU96767562/index.html","https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-011.pdf"],"products":["mitsubishielectric:ma-ew85s-e_firmware","mitsubishielectric:ma-ew85s-uk_firmware","mitsubishielectric:mac-507if-e_firmware","mitsubishielectric:mac-587if-e_firmware","mitsubishielectric:mac-587if2-e_firmware","mitsubishielectric:mac-588if-e_firmware","mitsubishielectric:mfz-gxt50\\/60\\/73vfk_firmware","mitsubishielectric:mfz-xt50\\/60vfk_firmware","mitsubishielectric:msxy-fp05\\/07\\/10\\/13\\/18\\/20\\/24vgk-sg1_firmware","mitsubishielectric:msy-gp10\\/13\\/15\\/18\\/20\\/24vfk-sg1_firmware","mitsubishielectric:msz-ap15\\/20\\/25\\/35\\/42\\/50\\/60\\/71vgk-e2_firmware","mitsubishielectric:msz-ap15\\/20\\/25\\/35\\/42\\/50\\/60\\/71vgk-er2_firmware","mitsubishielectric:msz-ap15\\/20\\/25\\/35\\/42\\/50\\/60\\/71vgk-et2_firmware","mitsubishielectric:msz-ap22\\/25\\/35\\/42\\/50\\/60\\/71\\/80vgkd-a2_firmware","mitsubishielectric:msz-ap22\\/25\\/35\\/42\\/50\\/61\\/70\\/80vgkd-a1_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50\\/60\\/71vgk-e3_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50\\/60\\/71vgk-er3_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50\\/60\\/71vgk-et3_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-e1_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-e7_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-e8_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-en1_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-en2_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-en3_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-er1_firmware","mitsubishielectric:msz-ap25\\/35\\/42\\/50vgk-et1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-e1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-e6_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-er1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-et1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgk-sc1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgkp-e6_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgkp-er1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgkp-et1_firmware","mitsubishielectric:msz-ay25\\/35\\/42\\/50vgkp-sc1_firmware","mitsubishielectric:msz-bt20\\/25\\/35\\/50vgk-e1_firmware","mitsubishielectric:msz-bt20\\/25\\/35\\/50vgk-e2_firmware","mitsubishielectric:msz-bt20\\/25\\/35\\/50vgk-e3_firmware","mitsubishielectric:msz-bt20\\/25\\/35\\/50vgk-er1_firmware","mitsubishielectric:msz-bt20\\/25\\/35\\/50vgk-er2_firmware","mitsubishielectric:msz-bt20\\/25\\/35\\/50vgk-et1_firmware","mitsubishielectric:msz-bt20\\/25\\/35\\/50vgk-et2_firmware","mitsubishielectric:msz-bt20\\/25\\/35\\/50vgk-et3_firmware","mitsubishielectric:msz-ef18\\/22\\/25\\/35\\/42\\/50vgkb-e1_firmware","mitsubishielectric:msz-ef18\\/22\\/25\\/35\\/42\\/50vgkb-e2_firmware","mitsubishielectric:msz-ef18\\/22\\/25\\/35\\/42\\/50vgks-e1_firmware","mitsubishielectric:msz-ef18\\/22\\/25\\/35\\/42\\/50vgks-e2_firmware","mitsubishielectric:msz-ef18\\/22\\/25\\/35\\/42\\/50vgkw-e1_firmware","mitsubishielectric:msz-ef18\\/22\\/25\\/35\\/42\\/50vgkw-e2_firmware","mitsubishielectric:msz-ef22\\/25\\/35\\/42\\/50vgkb-a1_firmware"],"source":"nvd","synced_at":"2026-10-19T21:37:08.729216836+00:00"},"epss":{"cve":"CVE-2022-33322","score":0.00952,"percentile":0.61321,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}