CVE-2022-24296

CVE-2022-24296 describes a critical "Use of a Broken or Risky Cryptographic Algorithm" vulnerability affecting numerous versions of Mitsubishi Air Conditioning System products. This flaw allows a remote, unauthenticated attacker to intercept and decrypt sensitive communications due to weak encryption. Rated with a CVSS score of 7.5 (HIGH), the vulnerability has a network attack vector and low attack complexity, enabling a high-impact disclosure of encrypted messages without user interaction. The EPSS score is very low, suggesting a minimal probability of exploitation in the wild. Currently, there is no known public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on the CISA KEV catalog. Community discussion and media coverage are also absent, indicating a lack of active exploitation or widespread attention.