7.4
High
CVE-2021-21963 An information disclosure vulnerability exists in the Web Server functionality of Sealevel Systems, Inc
Description
An information disclosure vulnerability exists in the Web Server functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sealevel | Versions not published |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Sealevel
The 10 CVEs of Sealevel →
CVE-2021-21962
A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc
9.0
Critical
CVE-2021-21968
A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc
8.1
High
CVE-2021-21959
A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc
7.7
High
CVE-2021-21965
A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems, Inc
8.6
High