CVE-2021-21971

Name of the Vulnerable Software and Affected Versions Sealevel Systems, Inc. SeaConnect 370W version 1.3.34

Description An out-of-bounds write issue exists in the URL decode functionality. A specially-crafted MQTT payload can lead to an out-of-bounds write. An attacker can perform a man-in-the-middle attack to trigger this issue.

Recommendations For version 1.3.34, consider disabling the URL decode functionality until a patch is available. Restrict access to the MQTT payload to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.