Sealevel Systems SeaConnect 370W File Writing Vulnerability

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things (Iiot) edge device from Sealevel Systems, Inc. The Sealevel Systems SeaConnect 370W is vulnerable to a file-write vulnerability, which stems from the fact that the product’s OTA update task feature does not effectively restrict file-write functionality, and can be exploited to cause any file overwrite via a specially crafted MQTT load.