Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-20593 Details

Description

Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and prior, EB-50GU-A Ver 7.09 and prior, EB-50GU-J Ver 7.09 and prior, AE-200A Ver 7.93 and prior, AE-200E Ver 7.93 and prior, AE-50A Ver 7.93 and prior, AE-50E Ver 7.93 and prior, EW-50A Ver 7.93 and prior, EW-50E Ver 7.93 and prior, TE-200A Ver 7.93 and prior, TE-50A Ver 7.93 and prior, TW-50A Ver 7.93 and prior, CMS-RMD-J Ver.1.30 and prior) and Air Conditioning System/Expansion Controllers (PAC-YG50ECA Ver.2.20 and prior) allows a remote authenticated attacker to impersonate administrators to disclose configuration information of the air conditioning system and tamper information (e.g. operation information and configuration of air conditioning system) by exploiting this vulnerability.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.1 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://jvn.jp/vu/JVNVU96046575/index.html	CVE	Third Party Advisory
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-004_en.pdf	CVE	Vendor Advisory
https://jvn.jp/vu/JVNVU96046575/index.html	[email protected]	Third Party Advisory
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-004_en.pdf	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-287	Improper Authentication	[email protected]

Affected Products

Product	Versions
mitsubishi g-50a firmware	>= 2.50, <= 3.35
CPE cpe:2.3:o:mitsubishi:g-50a_firmware:::::::: Remediation No remediation found in references.
mitsubishi g-50a	All versions
CPE cpe:2.3:h:mitsubishi:g-50a:-:::::::* Remediation No remediation found in references.
mitsubishi gb-50a firmware	>= 2.50, <= 3.35
CPE cpe:2.3:o:mitsubishi:gb-50a_firmware:::::::: Remediation No remediation found in references.
mitsubishi gb-50a	All versions
CPE cpe:2.3:h:mitsubishi:gb-50a:-:::::::* Remediation No remediation found in references.
mitsubishi ag-150a-a firmware	<= 3.20
CPE cpe:2.3:o:mitsubishi:ag-150a-a_firmware:::::::: Remediation No remediation found in references.
mitsubishi ag-150a-a	All versions
CPE cpe:2.3:h:mitsubishi:ag-150a-a:-:::::::* Remediation No remediation found in references.
mitsubishi ag-150a-j firmware	<= 3.20
CPE cpe:2.3:o:mitsubishi:ag-150a-j_firmware:::::::: Remediation No remediation found in references.
mitsubishi ag-150a-j	All versions
CPE cpe:2.3:h:mitsubishi:ag-150a-j:-:::::::* Remediation No remediation found in references.
mitsubishi gb-50ada-a firmware	<= 3.20
CPE cpe:2.3:o:mitsubishi:gb-50ada-a_firmware:::::::: Remediation No remediation found in references.
mitsubishi gb-50ada-a	All versions
CPE cpe:2.3:h:mitsubishi:gb-50ada-a:-:::::::* Remediation No remediation found in references.
mitsubishi gb-50ada-j firmware	<= 3.20
CPE cpe:2.3:o:mitsubishi:gb-50ada-j_firmware:::::::: Remediation No remediation found in references.
mitsubishi gb-50ada-j	All versions
CPE cpe:2.3:h:mitsubishi:gb-50ada-j:-:::::::* Remediation No remediation found in references.
mitsubishi eb-50gu-a firmware	<= 7.09
CPE cpe:2.3:o:mitsubishi:eb-50gu-a_firmware:::::::: Remediation No remediation found in references.
mitsubishi eb-50gu-a	All versions
CPE cpe:2.3:h:mitsubishi:eb-50gu-a:-:::::::* Remediation No remediation found in references.
mitsubishi eb-50gu-j firmware	<= 7.09
CPE cpe:2.3:o:mitsubishi:eb-50gu-j_firmware:::::::: Remediation No remediation found in references.
mitsubishi eb-50gu-j	All versions
CPE cpe:2.3:h:mitsubishi:eb-50gu-j:-:::::::* Remediation No remediation found in references.
mitsubishi ae-200a firmware	<= 7.93
CPE cpe:2.3:o:mitsubishi:ae-200a_firmware:::::::: Remediation No remediation found in references.
mitsubishi ae-200a	All versions
CPE cpe:2.3:h:mitsubishi:ae-200a:-:::::::* Remediation No remediation found in references.
mitsubishi ae-200e firmware	<= 7.93
CPE cpe:2.3:o:mitsubishi:ae-200e_firmware:::::::: Remediation No remediation found in references.
mitsubishi ae-200e	All versions
CPE cpe:2.3:h:mitsubishi:ae-200e:-:::::::* Remediation No remediation found in references.
mitsubishi ae-50a firmware	<= 7.93
CPE cpe:2.3:o:mitsubishi:ae-50a_firmware:::::::: Remediation No remediation found in references.
mitsubishi ae-50a	All versions
CPE cpe:2.3:h:mitsubishi:ae-50a:-:::::::* Remediation No remediation found in references.
mitsubishi ae-50e firmware	<= 7.93
CPE cpe:2.3:o:mitsubishi:ae-50e_firmware:::::::: Remediation No remediation found in references.
mitsubishi ae-50e	All versions
CPE cpe:2.3:h:mitsubishi:ae-50e:-:::::::* Remediation No remediation found in references.
mitsubishi ew-50a firmware	<= 7.93
CPE cpe:2.3:o:mitsubishi:ew-50a_firmware:::::::: Remediation No remediation found in references.
mitsubishi ew-50a	All versions
CPE cpe:2.3:h:mitsubishi:ew-50a:-:::::::* Remediation No remediation found in references.
mitsubishi ew-50e firmware	<= 7.93
CPE cpe:2.3:o:mitsubishi:ew-50e_firmware:::::::: Remediation No remediation found in references.
mitsubishi ew-50e	All versions
CPE cpe:2.3:h:mitsubishi:ew-50e:-:::::::* Remediation No remediation found in references.
mitsubishi te-200a firmware	<= 7.93
CPE cpe:2.3:o:mitsubishi:te-200a_firmware:::::::: Remediation No remediation found in references.
mitsubishi te-200a	All versions
CPE cpe:2.3:h:mitsubishi:te-200a:-:::::::* Remediation No remediation found in references.
mitsubishi te-50a firmware	<= 7.93
CPE cpe:2.3:o:mitsubishi:te-50a_firmware:::::::: Remediation No remediation found in references.
mitsubishi te-50a	All versions
CPE cpe:2.3:h:mitsubishi:te-50a:-:::::::* Remediation No remediation found in references.
mitsubishi tw-50a firmware	<= 7.93
CPE cpe:2.3:o:mitsubishi:tw-50a_firmware:::::::: Remediation No remediation found in references.
mitsubishi tw-50a	All versions
CPE cpe:2.3:h:mitsubishi:tw-50a:-:::::::* Remediation No remediation found in references.
mitsubishi cms-rmd-j firmware	<= 1.30
CPE cpe:2.3:o:mitsubishi:cms-rmd-j_firmware:::::::: Remediation No remediation found in references.
mitsubishi cms-rmd-j	All versions
CPE cpe:2.3:h:mitsubishi:cms-rmd-j:-:::::::* Remediation No remediation found in references.
mitsubishi pac-yg50eca firmware	<= 2.20
CPE cpe:2.3:o:mitsubishi:pac-yg50eca_firmware:::::::: Remediation No remediation found in references.
mitsubishi pac-yg50eca	All versions
CPE cpe:2.3:h:mitsubishi:pac-yg50eca:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Aug 5, 2021	Initial Analysis	[email protected]

CVE-2021-20593 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation