Sealevel Systems SeaConnect 370W Buffer Overflow Vulnerability (CNVD-2022-10701)

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things (Iiot) edge device from Sealevel Systems, Inc. A buffer overflow vulnerability exists in Sealevel Systems SeaConnect 370W, which stems from the product’s OTA update task feature that does not effectively limit memory boundaries, and can be exploited to cause out-of-bounds writes and denial of service via specially crafted network packets.