GCVE - cpe:2.3:h:sealevel:seaconnect_370w:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:sealevel:seaconnect_370w:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Sealevel (`3084217f-4f2a-57a1-a80a-8d04adb41a69`)
Product	Seaconnect 370W (`127ffb7a-d8e7-557e-becb-82bb1f6f62ad`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-21971`	not_vulnerable	2026-06-08 05:29:59.182819	Details available LOW (3.7) An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to an out-of-bounds write. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Published: 2022-02-04T22:29:02.000Z Updated: 2025-04-15T19:11:19.375Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2021-1406	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21970`	not_vulnerable	2026-06-08 05:29:59.182426	Details available LOW (3.7) An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. The HandleIncomingSeaCloudMessage function uses at [3] the json_object_get_string to populate the p_name global variable. The p_name is only 0x80 bytes long, and the total MQTT message could be up to 0x201 bytes. Because the function json_object_get_string will fill str based on the length of the json’s value and not the actual str size, this would result in a possible out-of-bounds write. Published: 2022-02-04T22:29:01.000Z Updated: 2025-04-15T19:11:32.563Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2021-1396	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21969`	not_vulnerable	2026-06-08 05:29:59.181725	Details available LOW (3.7) An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. The HandleIncomingSeaCloudMessage function uses at [4] the json_object_get_string to populate the p_payload global variable. The p_payload is only 0x100 bytes long, and the total MQTT message could be up to 0x201 bytes. Because the function json_object_get_string will fill str based on the length of the json’s value and not the actual str size, this would result in a possible out-of-bounds write. Published: 2022-02-04T22:29:00.000Z Updated: 2025-04-15T19:11:38.376Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2021-1396	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21968`	not_vulnerable	2026-06-08 05:29:59.180157	Details available HIGH (8.1) A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to arbitrary file overwrite. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Published: 2022-02-04T22:29:10.000Z Updated: 2025-04-15T19:10:23.114Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2021-1395	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21967`	not_vulnerable	2026-06-08 05:29:59.179503	Details available MEDIUM (6.5) An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Published: 2022-04-14T19:56:06.861Z Updated: 2025-04-15T19:08:14.098Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2021-1394	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21965`	not_vulnerable	2026-06-08 05:29:59.161406	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21964`	not_vulnerable	2026-06-08 05:29:59.160963	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21963`	not_vulnerable	2026-06-08 05:29:59.160607	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21962`	not_vulnerable	2026-06-08 05:29:59.160228	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21961`	not_vulnerable	2026-06-08 05:29:59.159573	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21960`	not_vulnerable	2026-06-08 05:29:59.159187	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21959`	not_vulnerable	2026-06-08 05:29:59.158691	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.