What’s Vulnerable › Vulnerabilities

CVE-2021-21962

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-02-04 · updated 2026-06-17
• Weakness: CWE-122

Description

A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A series of specially-crafted MQTT payloads can lead to remote code execution. An attacker must perform a man-in-the-middle attack in order to trigger this vulnerability.

Affected products

• Sealevel Systems, Inc. SeaConnect 370W: 1.3.34

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1390
• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1390

Get alerted when CVE-2021-21962 or the next vulnerability affects your stack