Skip to content
Fencer Vulns
high 7.2

CVE-2026-5667 json

Information Disclosure, Information Tampering, or Denial-of-Service (DoS) Vulnerability in Multiple Home Appliances

published 2026-06-17 4 mo ago modified 2026-06-17 4 mo ago also EUVD-2026-37646

cvss
7.2
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 4%
public exploits
0
none known

Summary

Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Packaged Air Conditioners (for Japan and outside Japan); Refrigerators (for Japan); Heat Pump Water Heaters / HEMS-Compatible Adapters / Wireless LAN Adapters (for Japan); Bathroom Dryer / Heater / Ventilation Systems (for Japan); Adapters for Airflow Ventilation Systems, Heat Pump Chilled / Hot Water Systems, and Ventilation / Air-Conditioning System Air Resorts (for Japan); Lossnay Central Ventilation Systems (for Japan); Smart Switches for Ventilation Fans and Lossnay (for Japan); IH Cooking Heaters (for Japan); and Rice Cookers (for Japan) allows an attacker within Wi-Fi radio range of an affected product to access the affected product using a hard-coded SSID and password, thereby obtaining device data such as operation status, room set temperature, and room temperature; changing the air-conditioner or Wi-Fi settings; or causing Wi-Fi communication to enter a denial-of-service (DoS) condition.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
4 mo ago

Exploit prediction

0.15% chance of exploitation in the next 30 days, higher than 4% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 7.2 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
CNA 4.0 7.2 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR2223-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR2224-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR2523-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR2524-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR2823-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR2824-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR3623-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR3624-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR4023S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR4024S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR5623S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR5624S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR6323S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR6324S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR7123S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BKR7124S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2223-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2224-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2225-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2226-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2523-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2524-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2525-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2526-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2823-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2824-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2825-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV2826-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV3623-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV3624-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV3625-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV3626-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV4023S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV4024S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV4025S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV4026S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV5623S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV5624S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV5625S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV5626S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV6323S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV6324S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV6325S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV6326S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV7123S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV7124S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV7125S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-BXV7126S-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-EM2220E8-W
  • Mitsubishi Electric Corporation Room Air Conditioners (for Japan) MSZ-EM2221E9-W

Classification

Weakness
  • CWE-798 Use of Hard-coded Credentials

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.