CVE-2022-24296
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.
Uso de una vulnerabilidad de Algoritmo Criptográfico Roto o Arriesgado en el Sistema de aire Acondicionado G-150AD Versiones 3.21 y anteriores, el Sistema de aire Acondicionado AG-150A-A Versiones 3.21 y anteriores, el Sistema de aire Acondicionado AG-150A-J Versiones 3.21 y anteriores, el Sistema de aire Acondicionado GB-50AD Versiones 3.21 y anteriores, el Sistema de aire Acondicionado GB-50ADA-A Versiones 3. 21 y anteriores, Sistema de aire Acondicionado GB-50ADA-J Versiones 3.21 y anteriores, Sistema de aire Acondicionado EB-50GU-A Versiones 7.10 y anteriores, Sistema de aire Acondicionado EB-50GU-J Versiones 7.10 y anteriores, Sistema de aire Acondicionado AE-200J Versiones 7.97 y anteriores, Sistema de aire Acondicionado AE-200A Versiones 7.97 y anteriores, Sistema de aire Acondicionado AE-200E Versiones 7.97 y anteriores, Sistema de aire Acondicionado AE-50J Versiones 7.97 y anteriores, Sistema de aire Acondicionado AE-50A Versiones 7.97 y anteriores, Sistema de aire Acondicionado AE-50E Versiones 7.97 y anteriores, Sistema de aire Acondicionado EW-50J Versiones 7.97 y anteriores, Sistema de aire Acondicionado EW-50A Versiones 7.97 y anteriores, Sistema de aire Acondicionado EW-50E Versiones 7. 97 y anteriores, Sistema de aire Acondicionado TE-200A Versiones 7.97 y anteriores, Sistema de aire Acondicionado TE-50A Versiones 7.97 y anteriores y Sistema de aire Acondicionado TW-50A Versiones 7.97 y anteriores permite a un atacante remoto no autenticado causar una divulgación de mensajes encriptados de los sistemas de aire acondicionado al olfatear las comunicaciones encriptadas
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-02-01 CVE Reserved
- 2022-06-08 CVE Published
- 2023-12-30 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/vu/JVNVU95298925/index.html | Third Party Advisory | |
| https://www.mee.co.jp/psirt/vulnerability/pdf/2022-001.pdf | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-005_en.pdf | 2022-06-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishi Search vendor "Mitsubishi" | Ae-200a Firmware Search vendor "Mitsubishi" for product "Ae-200a Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Ae-200a Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ae-200a Search vendor "Mitsubishi" for product "Ae-200a" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ae-200e Firmware Search vendor "Mitsubishi" for product "Ae-200e Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Ae-200e Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ae-200e Search vendor "Mitsubishi" for product "Ae-200e" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ae-200j Firmware Search vendor "Mitsubishi" for product "Ae-200j Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Ae-200j Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ae-200j Search vendor "Mitsubishi" for product "Ae-200j" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ae-50a Firmware Search vendor "Mitsubishi" for product "Ae-50a Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Ae-50a Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ae-50a Search vendor "Mitsubishi" for product "Ae-50a" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ae-50e Firmware Search vendor "Mitsubishi" for product "Ae-50e Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Ae-50e Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ae-50e Search vendor "Mitsubishi" for product "Ae-50e" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ae-50j Firmware Search vendor "Mitsubishi" for product "Ae-50j Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Ae-50j Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ae-50j Search vendor "Mitsubishi" for product "Ae-50j" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ag-150a-a Firmware Search vendor "Mitsubishi" for product "Ag-150a-a Firmware" | <= 3.21 Search vendor "Mitsubishi" for product "Ag-150a-a Firmware" and version " <= 3.21" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ag-150a-a Search vendor "Mitsubishi" for product "Ag-150a-a" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ag-150a-j Firmware Search vendor "Mitsubishi" for product "Ag-150a-j Firmware" | <= 3.21 Search vendor "Mitsubishi" for product "Ag-150a-j Firmware" and version " <= 3.21" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ag-150a-j Search vendor "Mitsubishi" for product "Ag-150a-j" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Eb-50gu-a Firmware Search vendor "Mitsubishi" for product "Eb-50gu-a Firmware" | <= 7.10 Search vendor "Mitsubishi" for product "Eb-50gu-a Firmware" and version " <= 7.10" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Eb-50gu-a Search vendor "Mitsubishi" for product "Eb-50gu-a" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Eb-50gu-j Firmware Search vendor "Mitsubishi" for product "Eb-50gu-j Firmware" | <= 7.10 Search vendor "Mitsubishi" for product "Eb-50gu-j Firmware" and version " <= 7.10" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Eb-50gu-j Search vendor "Mitsubishi" for product "Eb-50gu-j" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ew-50a Firmware Search vendor "Mitsubishi" for product "Ew-50a Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Ew-50a Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ew-50a Search vendor "Mitsubishi" for product "Ew-50a" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ew-50e Firmware Search vendor "Mitsubishi" for product "Ew-50e Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Ew-50e Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ew-50e Search vendor "Mitsubishi" for product "Ew-50e" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Ew-50j Firmware Search vendor "Mitsubishi" for product "Ew-50j Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Ew-50j Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Ew-50j Search vendor "Mitsubishi" for product "Ew-50j" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | G-150ad Firmware Search vendor "Mitsubishi" for product "G-150ad Firmware" | <= 3.21 Search vendor "Mitsubishi" for product "G-150ad Firmware" and version " <= 3.21" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | G-150ad Search vendor "Mitsubishi" for product "G-150ad" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Gb-50a Firmware Search vendor "Mitsubishi" for product "Gb-50a Firmware" | <= 3.21 Search vendor "Mitsubishi" for product "Gb-50a Firmware" and version " <= 3.21" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Gb-50a Search vendor "Mitsubishi" for product "Gb-50a" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Gb-50ada-a Firmware Search vendor "Mitsubishi" for product "Gb-50ada-a Firmware" | <= 3.21 Search vendor "Mitsubishi" for product "Gb-50ada-a Firmware" and version " <= 3.21" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Gb-50ada-a Search vendor "Mitsubishi" for product "Gb-50ada-a" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Gb-50ada-j Firmware Search vendor "Mitsubishi" for product "Gb-50ada-j Firmware" | <= 3.21 Search vendor "Mitsubishi" for product "Gb-50ada-j Firmware" and version " <= 3.21" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Gb-50ada-j Search vendor "Mitsubishi" for product "Gb-50ada-j" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Te-200a Firmware Search vendor "Mitsubishi" for product "Te-200a Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Te-200a Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Te-200a Search vendor "Mitsubishi" for product "Te-200a" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Te-50a Firmware Search vendor "Mitsubishi" for product "Te-50a Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Te-50a Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Te-50a Search vendor "Mitsubishi" for product "Te-50a" | - | - |
Safe
|
| Mitsubishi Search vendor "Mitsubishi" | Tw-50a Firmware Search vendor "Mitsubishi" for product "Tw-50a Firmware" | <= 7.97 Search vendor "Mitsubishi" for product "Tw-50a Firmware" and version " <= 7.97" | - |
Affected
| in | Mitsubishi Search vendor "Mitsubishi" | Tw-50a Search vendor "Mitsubishi" for product "Tw-50a" | - | - |
Safe
|