Missing Authentication Vulnerability in Mitsubishi Electric Air Conditioning Products

CVE-2025-3699

What is CVE-2025-3699?

A missing authentication vulnerability exists in various Mitsubishi Electric air conditioning products, allowing a remote, unauthenticated attacker to bypass critical authentication mechanisms. This flaw enables unauthorized control over the air conditioning systems as well as the potential to access and disclose sensitive information. Furthermore, attackers can exploit this vulnerability to manipulate firmware components of the affected systems, posing significant security risks and operational disruptions.

References