CVE-2021-21967
MEDIUM 5.9EPSS 0.7%
An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
- Affected
- Sealevel Systems, Inc. · SeaConnect 370W
- CVSS v3.1 NVD
- 5.9 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS v3.0 CISCO
- 6.5 MEDIUM
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - CVSS v2.0 NVD
- 7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C - EPSS
- 0.74% chance of exploitation in the next 30 days, 54th percentile
- Published
- 2022-04-14
- Updated
- 2025-04-15