ID
VAR-202202-0651
CVE
CVE-2021-21970
TITLE
Sealevel Systems, Inc. SeaConnect 370W Out-of-bounds write vulnerability in
Trust: 0.8
DESCRIPTION
An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. The HandleIncomingSeaCloudMessage function uses at [3] the json_object_get_string to populate the p_name global variable. The p_name is only 0x80 bytes long, and the total MQTT message could be up to 0x201 bytes. Because the function json_object_get_string will fill str based on the length of the json’s value and not the actual str size, this would result in a possible out-of-bounds write. Sealevel Systems, Inc. SeaConnect 370W Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Used to remotely monitor and control the status of the actual I/O process
Trust: 2.7
IOT TAXONOMY
| category: | ['IoT'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | sealevel | model: | seaconnect 370w | scope: | eq | version: | 1.3.34 | Trust: 1.0 |
| vendor: | sealevel | model: | seaconnect 370w | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | sealevel | model: | seaconnect 370w | scope: | eq | version: | seaconnect 370w firmware 1.3.34 | Trust: 0.8 |
| vendor: | sealevel | model: | systems seaconnect 370w | scope: | eq | version: | v1.3.34 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
buffer error
Trust: 0.6
PATCH
| title: | Top Page | url: | https://www.sealevel.com/ | Trust: 0.8 |
| title: | Patch for Sealevel Systems SeaConnect 370w Out-of-bounds Write Vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/319871 | Trust: 0.6 |
| title: | Sealevel Systems SeaConnect 370w Buffer error vulnerability fix | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=182382 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-21970 | Trust: 3.8 |
| db: | TALOS | id: | TALOS-2021-1396 | Trust: 2.4 |
| db: | JVNDB | id: | JVNDB-2022-004770 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2022-10697 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202202-348 | Trust: 0.6 |
REFERENCES
| url: | https://talosintelligence.com/vulnerability_reports/talos-2021-1396 | Trust: 2.4 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-21970 | Trust: 1.4 |
| url: | https://www.sealevel.com/product/370w-a-wifi-to-form-c-relays-digital-inputs-a-d-inputs-and-1-wire-bus-seaconnect-multifunction-io-edge-module-powered-by-seacloud/ | Trust: 0.6 |
CREDITS
Discovered by Francesco Benvenuto and Matt Wiseman of Cisco Talos.
Trust: 0.6
SOURCES
| db: | CNVD | id: | CNVD-2022-10697 |
| db: | JVNDB | id: | JVNDB-2022-004770 |
| db: | CNNVD | id: | CNNVD-202202-348 |
| db: | NVD | id: | CVE-2021-21970 |
LAST UPDATE DATE
2024-08-14T13:42:59.308000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2022-10697 | date: | 2022-02-16T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-004770 | date: | 2023-05-01T08:18:00 |
| db: | CNNVD | id: | CNNVD-202202-348 | date: | 2022-03-10T00:00:00 |
| db: | NVD | id: | CVE-2021-21970 | date: | 2022-10-01T02:11:52.033 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2022-10697 | date: | 2022-02-16T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-004770 | date: | 2023-05-01T00:00:00 |
| db: | CNNVD | id: | CNNVD-202202-348 | date: | 2022-02-04T00:00:00 |
| db: | NVD | id: | CVE-2021-21970 | date: | 2022-02-04T23:15:10.793 |