7.4
Élevée
CVE-2021-21963 An information disclosure vulnerability exists in the Web Server functionality of Sealevel Systems, Inc
Description
An information disclosure vulnerability exists in the Web Server functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sealevel | Versions non publiées |
Références
- talosintelligence.com talosintelligence.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Sealevel
Les 10 CVE de Sealevel →
CVE-2021-21962
A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc
9.0
Critique
CVE-2021-21968
A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc
8.1
Élevée
CVE-2021-21959
A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc
7.7
Élevée
CVE-2021-21965
A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems, Inc
8.6
Élevée