CVE-2022-33321

Quick assessment

Copy summary Copy citation

Affected

Mitsubishi Electric Corporation PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-M

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mitsubishi Electric consumer electronics products是日本三菱电机（Mitsubishi Electric）公司的一系列消费电子产品。 Mitsubishi Electric consumer electronics products存在安全漏洞，该漏洞源于对HTTP连接使用基本身份验证，导致敏感信息的明文传输，允许远程未经身份验证的攻击者通过嗅探凭证信息（用户名和密码）来披露产品中的信息或导致拒绝服务 (DoS) 情况。

CVE-2022-33321 affects Mitsubishi Electric Corporation PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-M. No confirmed in-the-wild exploitation; assess based on exposure. Mitsubishi Electric consumer electronics products是日本三菱电机（Mitsubishi Electric）公司的一系列消费电子产品。 Mitsubishi Electric consumer electronics products存在安全漏洞，该漏洞源于对HTTP连接使用基本身份验证，导致敏感信息的明文传输， CVE-2022-33321 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2022-33321

I. Basic Information for CVE-2022-33321

Affected Products

II. Public POCs for CVE-2022-33321

III. Intelligence Information for CVE-2022-33321

Vendor Advisories for CVE-2022-33321 (1)

• https://jvn.jp/vu/JVNVU96767562/index.html government-resource

Other References for CVE-2022-33321 (2)

• https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2022-010.pdf vendor-advisory
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-010_en.pdf vendor-advisory

• https://www.cve.org/CVERecord?id=CVE-2022-33321

IV. Related Vulnerabilities

V. Comments for CVE-2022-33321