CVE-2021-21971
An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to an out-of-bounds write. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
-
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
-
04/02/2022
Operating Systems 1
Se
Seaconnect 370W Firmware
by Sealevel
1 Version
a year ago
Vulnerability Categories 1
Out-of-bounds Write
Advisory Links 2
http://www.vicarius.io
is owned and operated by Vicarius Ltd. (the āCompanyā). All information contained on the
Website is purely for informational, and educational purposes and should be independently
verified and confirmed. Vicarius does not accept any liability for any loss or damage
whatsoever caused in reliance upon such information or services. No statements or information
presented in any form by Vicarius is intended as fact, and you agree that you will not
consider the statements or information presented on the Website as fact or as a guarantee of
performance.
Related CVEs
Security Research Topics
By Vicarius Cartoons
Apr 12, 2023
Vicarius Cartoons Presents: IT Passover
By David Parkinson Frost
Mar 27, 2023
Acropalypse wreaking havoc, zero-days in Samsung Exynos, Emotet returns (again)
By Vicarius Cartoons
Feb 14, 2023
Vicarius Cartoons Presents: Cupid's Exploit
By Paul Lighter
Jan 11, 2023
When the Target is Also the Threat
A software failure grounded thousands of flights today, raising a complicated question - how do you secure an unstable system? The answer has never been more urgent.
By Paul Lighter
Jan 06, 2023
The Uncomfortable Implications of the LastPass Attack
The recent attack on LastPass has people questioning if they can trust password managers. But there's a bigger issue lurking underneath - can you trust ANY security vendor?
Start Closing Security Gaps
- Risk reduction from Day 1
- Fast set-up and deployment
- Unified platform
- Full-featured 14-day trial