CVE-2021-21960CWE-121

A stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel Systems, Inc

Critical · published February 4, 2022

CVSS v3.0
10.0
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

🔥 A specially-crafted network packet is all it takes to trigger this stack-based buffer overflow in Sealevel Systems, throwing the door wide open for remote code execution! Think of it like a mischievous delivery person who slips a clever package into your front porch — once opened, it wreaks havoc inside your house by executing surprises you didn’t sign up for! An attacker could gain complete control over the affected device, allowing them to execute any malicious code they desire. This could result in compromising sensitive data, disrupting services, or even spreading to other networked devices — absolutely devastating!

Put simply

Think of it like a mischievous delivery person who slips a clever package into your front porch — once opened, it wreaks havoc inside your house by executing surprises you didn’t sign up for! This vulnerability in the LLMNR functionality of the SeaConnect 370W allows an attacker to exploit a stack-based buffer overflow by sending a specially-crafted packet, which can lead to arbitrary code execution without any user interaction.

What to do

An attacker could gain complete control over the affected device, allowing them to execute any malicious code they desire. This could result in compromising sensitive data, disrupting services, or even spreading to other networked devices — absolutely devastating! Immediate action is required! Patch the SeaConnect 370W to version 1.3.35 to mitigate this vulnerability. Review network security policies to filter and monitor incoming packets for anomalies. 🚨 You’ve got this! Follow these steps, and you’ll keep your network fortified and secure! 🛡️

The record
Technical detail
CVSS v3.0
10.0 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02639 · 85.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-02-04T22:29Z
EPSS history
Timeline
  • 04 FEB 22:29Z
    A stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel Systems, Inc
    cvelistv5