CVE-2022-33322

6.1 mediumEPSS 1.0%

Medium (6.1) in mitsubishielectric. EPSS 1.0% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-11-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mitsubishielectric:ma-ew85s-e_firmware
mitsubishielectric:ma-ew85s-uk_firmware
mitsubishielectric:mac-507if-e_firmware
mitsubishielectric:mac-587if-e_firmware
mitsubishielectric:mac-587if2-e_firmware
mitsubishielectric:mac-588if-e_firmware
mitsubishielectric:mfz-gxt50\/60\/73vfk_firmware
mitsubishielectric:mfz-xt50\/60vfk_firmware
mitsubishielectric:msxy-fp05\/07\/10\/13\/18\/20\/24vgk-sg1_firmware
mitsubishielectric:msy-gp10\/13\/15\/18\/20\/24vfk-sg1_firmware
mitsubishielectric:msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-e2_firmware
mitsubishielectric:msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-er2_firmware
mitsubishielectric:msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-et2_firmware
mitsubishielectric:msz-ap22\/25\/35\/42\/50\/60\/71\/80vgkd-a2_firmware
mitsubishielectric:msz-ap22\/25\/35\/42\/50\/61\/70\/80vgkd-a1_firmware
mitsubishielectric:msz-ap25\/35\/42\/50\/60\/71vgk-e3_firmware
mitsubishielectric:msz-ap25\/35\/42\/50\/60\/71vgk-er3_firmware
mitsubishielectric:msz-ap25\/35\/42\/50\/60\/71vgk-et3_firmware
mitsubishielectric:msz-ap25\/35\/42\/50vgk-e1_firmware
mitsubishielectric:msz-ap25\/35\/42\/50vgk-e7_firmware
mitsubishielectric:msz-ap25\/35\/42\/50vgk-e8_firmware
mitsubishielectric:msz-ap25\/35\/42\/50vgk-en1_firmware
mitsubishielectric:msz-ap25\/35\/42\/50vgk-en2_firmware
mitsubishielectric:msz-ap25\/35\/42\/50vgk-en3_firmware
mitsubishielectric:msz-ap25\/35\/42\/50vgk-er1_firmware
mitsubishielectric:msz-ap25\/35\/42\/50vgk-et1_firmware
mitsubishielectric:msz-ay25\/35\/42\/50vgk-e1_firmware
mitsubishielectric:msz-ay25\/35\/42\/50vgk-e6_firmware
mitsubishielectric:msz-ay25\/35\/42\/50vgk-er1_firmware
mitsubishielectric:msz-ay25\/35\/42\/50vgk-et1_firmware
mitsubishielectric:msz-ay25\/35\/42\/50vgk-sc1_firmware
mitsubishielectric:msz-ay25\/35\/42\/50vgkp-e6_firmware
mitsubishielectric:msz-ay25\/35\/42\/50vgkp-er1_firmware
mitsubishielectric:msz-ay25\/35\/42\/50vgkp-et1_firmware
mitsubishielectric:msz-ay25\/35\/42\/50vgkp-sc1_firmware
mitsubishielectric:msz-bt20\/25\/35\/50vgk-e1_firmware
mitsubishielectric:msz-bt20\/25\/35\/50vgk-e2_firmware
mitsubishielectric:msz-bt20\/25\/35\/50vgk-e3_firmware
mitsubishielectric:msz-bt20\/25\/35\/50vgk-er1_firmware
mitsubishielectric:msz-bt20\/25\/35\/50vgk-er2_firmware
mitsubishielectric:msz-bt20\/25\/35\/50vgk-et1_firmware
mitsubishielectric:msz-bt20\/25\/35\/50vgk-et2_firmware
mitsubishielectric:msz-bt20\/25\/35\/50vgk-et3_firmware
mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkb-e1_firmware
mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkb-e2_firmware
mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgks-e1_firmware
mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgks-e2_firmware
mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkw-e1_firmware
mitsubishielectric:msz-ef18\/22\/25\/35\/42\/50vgkw-e2_firmware
mitsubishielectric:msz-ef22\/25\/35\/42\/50vgkb-a1_firmware

References

Check your stack JSON