Auth bypass in Mitsubishi Electric Corporation Ae-200a
CVE-2025-3699
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W all versions, G-50A all versions, GB-50 all versions, GB-50A all versions, GB-24A all versions, G-150AD all versions, AG-150A-A all versions, AG-150A-J all versions, GB-50AD all versions, GB-50ADA-A all versions, GB-50ADA-J all versions, EB-50GU-A all versions, EB-50GU-J all versions, AE-200J all versions, AE-200A all versions, AE-200E all versions, AE-50J all versions, AE-50A all versions, AE-50E all versions, EW-50J all versions, EW-50A all versions, EW-50E all versions, TE-200A all versions, TE-50A all versions, TW-50A all versions, and CMS-RMD-J all versions allows a remote unauthenticated attacker to bypass authentication and then control the air conditioning systems illegally, or disclose information in them by exploiting this vulnerability. In addition, the attacker may tamper with firmware for them using the disclosed information.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.011 (65.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 65th percentile — 65.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: +0.000
Affected products
- Mitsubishi Electric Corporation Ae-200a — versions All versions
- Mitsubishi Electric Corporation Ae-200e — versions All versions
- Mitsubishi Electric Corporation Ae-200j — versions All versions
- Mitsubishi Electric Corporation Ae-50a — versions All versions
- Mitsubishi Electric Corporation Ae-50e — versions All versions
- Mitsubishi Electric Corporation Ae-50j — versions All versions
- Mitsubishi Electric Corporation Ag-150a-A — versions All versions
- Mitsubishi Electric Corporation Ag-150a-J — versions All versions
- Mitsubishi Electric Corporation Cms-Rmd-J — versions All versions
- Mitsubishi Electric Corporation Eb-50gu-A — versions All versions
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-004_en.pdf (vendor-advisory)
- jvn.jp/vu/JVNVU96471539/ (government-resource)
- www.cisa.gov/news-events/ics-advisories/icsa-25-177-01 (government-resource)
Frequently asked questions
- What is CVE-2025-3699?
- CVE-2025-3699 is a critical-severity vulnerability in Mitsubishi Electric Corporation Ae-200a, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2025-06-26.
- How severe is CVE-2025-3699?
- Critical severity. CVSS v3 base score is 9.8 out of 10.
- Is CVE-2025-3699 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.