HIGH🇵🇱 Wersja polska

CVE-2021-21959

CVSS 8.1v3.1pub. 2022-02-04upd. 2024-11-21

A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. This misconfiguration significantly simplifies a man-in-the-middle attack, which directly leads to control of device functionality.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Sealevel Seaconnect 370w

    HW
    Sealevel
    wszystkie wersje

  • Sealevel Seaconnect 370w Firmware

    OS
    Sealevel
    1.3.34
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-21965CRITICAL9.3ten sam produkt

A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems,...

CVE-2021-21960CRITICAL10.0ten sam produkt

A stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel Systems, Inc. S...

CVE-2021-21961CRITICAL10.0ten sam produkt

A stack-based buffer overflow vulnerability exists in the NBNS functionality of Sealevel Systems, Inc. SeaConn...

CVE-2021-21964HIGH7.4ten sam produkt

A denial of service vulnerability exists in the Modbus configuration functionality of Sealevel Systems, Inc. S...

CVE-2021-21962HIGH8.1ten sam produkt

A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Syste...