Security Advisory

CVE-2021-21971

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-04 22:29:02
Last updated 2025-04-15 19:11:19
Assigner talos
State PUBLISHED

Description

An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to an out-of-bounds write. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.