{"timestamp":"2026-06-17T12:05:33.246758Z","id":"CVE-2026-5667","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Packaged Air Conditioners (for Japan and outside Japan); Refrigerators (for Japan); Heat Pump Water Heaters / HEMS-Compatible Adapters / Wireless LAN Adapters (for Japan); Bathroom Dryer / Heater / Ventilation Systems (for Japan); Adapters for Airflow Ventilation Systems, Heat Pump Chilled / Hot Water Systems, and Ventilation / Air-Conditioning System Air Resorts (for Japan); Lossnay Central Ventilation Systems (for Japan); Smart Switches for Ventilation Fans and Lossnay (for Japan); IH Cooking Heaters (for Japan); and Rice Cookers (for Japan) allows an attacker within Wi-Fi radio range of an affected product to access the affected product using a hard-coded SSID and password, thereby obtaining device data such as operation status, room set temperature, and room temperature; changing the air-conditioner or Wi-Fi settings; or causing Wi-Fi communication to enter a denial-of-service (DoS) condition.

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE-798

https://jvn.jp/vu/JVNVU99620284/

https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-001_en.pdf

[{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR2223-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR2224-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR2523-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR2524-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR2823-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR2824-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR3623-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR3624-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR4023S-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioners (for Japan) MSZ-BKR4024S-W","defaultStatus":"unaffected","versions":[{"version":"42.00 and prior","status":"affected"}]},{"vendor":"Mitsubishi Electric Corporation","product":"Room Air Conditioner