CVE-2021-21967CWE-120

An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc

Medium · published April 14, 2022

CVSS v3.0
6.5
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00744 · 54.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-04-14T19:56Z
EPSS history
Timeline
  • 14 APR 19:56Z
    An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc
    cvelistv5