servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote attackers to cause a denial of service (air-conditioning outage) via an XML document containing a setRequest command.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gb | Mitsubishi_electric | 50 (including) | 50 (including) |
| Gb | Mitsubishi_electric | 50a (including) | 50a (including) |