Weak Password Requirements in Mitsubishi Electric EcoGuideTAB Photovoltaic System Monitor

CVE-2025-5022

What is CVE-2025-5022?

The EcoGuideTAB photovoltaic system monitor by Mitsubishi Electric Corporation exhibits a vulnerability due to weak password requirements. This flaw allows an attacker within the Wi-Fi range to derive the password from the SSID. While the system may enter a power-saving mode after 5 minutes of inactivity, protecting it from vulnerability during non-use, the issue remains for active devices. Support for these affected models has ended since 2020, thus emphasizing the need for users to consider upgrading to more secure alternatives.

References