CVE-2021-21959

🗓️ 04 Feb 2022 22:29:09Reported by talosType

A misconfiguration in MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34 enables man-in-the-middle attack, leading to device control

Reporter	Title	Published	Views	Family All 10
CNNVD	Sealevel Systems SeaConnect 370W 信任管理问题漏洞	1 Feb 202200:00	–	cnnvd
CNVD	Sealevel Systems SeaConnect 370W Trust Management Issue Vulnerability	10 Feb 202200:00	–	cnvd
Cvelist	CVE-2021-21959	4 Feb 202222:29	–	cvelist
EUVD	EUVD-2021-9130	3 Oct 202520:07	–	euvd
NVD	CVE-2021-21959	4 Feb 202223:15	–	nvd
OSV	CVE-2021-21959	4 Feb 202223:15	–	osv
Prion	Design/Logic Flaw	4 Feb 202223:15	–	prion
RedhatCVE	CVE-2021-21959	22 May 202518:20	–	redhatcve
Talos	Sealevel Systems, Inc. SeaConnect 370W MQTTS Certificate Validation vulnerability	1 Feb 202200:00	–	talos
Vulnrichment	CVE-2021-21959	4 Feb 202222:29	–	vulnrichment

NVD

Vulners

Node

sealevel seaconnect_370w_firmwareMatch1.3.34

AND

sealevel seaconnect_370wMatch-

[
  {
    "product": "Sealevel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Sealevel Systems, Inc. SeaConnect 370W v1.3.34"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2021-1388

21 Nov 2024 05:49Current

7.9High risk

Vulners AI Score7.9

CVSS 26.8

CVSS 3.18.1

CVSS 37.7

EPSS0.00306

SSVC

CWE-295

cve-2021-21959 sealevel systems inc.seaconnect 370w misconfiguration mqtts man-in-the-middle attack nvd