CVE-2021-21971

MEDIUM

Sealevel SeaConnect 370W v1.3.34 - Out-of-bounds Write via MQTT Payload

Title source: llm

Description

An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to an out-of-bounds write. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

References (2)

Core 2

Core References

Not Applicable, Third Party Advisory x_refsource_misc

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1406

Exploit, Technical Description, Third Party Advisory

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1397

Scores

CVSS v3 5.9

EPSS 0.0070

EPSS Percentile 48.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-787

Status published

Products (1)

sealevel/seaconnect_370w_firmware 1.3.34

Published Feb 04, 2022

Tracked Since Feb 18, 2026