Skip to content
OpenAdvisories
Low · 3.7 CVE-2021-21971 EUVD-2021-9142GHSA-3975-hvrj-7hm8

An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-…

Published Feb 4, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to an out-of-bounds write. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Sealevel Sealevel Systems, Inc. SeaConnect 370W v1.3.34 —

References