Mitsubishi Electric Air Conditioning Systems

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose or tamper data in communication between the air conditioning system and the external computers or cause a denial-of-service condition.

CVEs (5)

Remediations

• G-150AD: Replace the air conditioning systems to AE-200J, AE-50J or EW-50J Version 7.98 or later
• AG-150A-A: Replace the air conditioning systems to AE-200A, AE-50A or EW-50A Version 7.98 or later
• AG-150A-J: Replace the air conditioning systems to AE-200E, AE-50E or EW-50E Version 7.98 or later
• GB-50AD: Replace the air conditioning systems to AE-200J, AE-50J or EW-50J Version 7.98 or later
• GB-50ADA-A: Replace the air conditioning systems to AE-200A, AE-50A or EW-50A Version 7.98 or later
• GB-50ADA-J: Replace the air conditioning systems to AE-200E, AE-50E or EW-50E Version 7.98 or later
• EB-50GU-A: Update to Version 7.11 or later
• EB-50GU-J: Update to Version 7.11 or later
• AE-200J: Update to Version 7.98 or later
• AE-200A: Update to Version 7.98 or later
• AE-200E: Update to Version 7.98 or later
• AE-50J: Update to Version 7.98 or later
• AE-50A: Update to Version 7.98 or later
• AE-50E: Update to Version 7.98 or later
• EW-50J: Update to Version 7.98 or later
• EW-50A: Update to Version 7.98 or later
• EW-50E: Update to Version 7.98 or later
• TE-200A: Update to Version 7.98 or later
• TE-50A: Update to Version 7.98 or later
• TW-50A: Update to Version 7.98 or later
• To minimize the risk of these vulnerabilities being exploited, please make sure air conditioning systems are properly configured as recommended by Mitsubishi Electric. Mitsubishi Electric recommends taking the following mitigation measures:
• Restrict the access to air conditioning systems from untrusted networks and hosts.
• Use an anti-virus software and update the OS and the web browser to the latest version on your computer to connect your air conditioning system.
• See Mitsubishi Electric's security bulletin for more information.

Affected Vendors

Affected Products (20)

Affected Sectors

Commercial Facilities