CVE-2021-21959

A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. This misconfiguration significantly simplifies a man-in-the-middle attack, which directly leads to control of device functionality...

CVE-2021-21959

A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. This misconfiguration significantly simplifies a man-in-the-middle attack, which directly leads to control of device functionality...

CVE-2021-21959

Sealevel Systems SeaConnect 370W v1.3.34 contains a misconfiguration in MQTTS where certificate validation is skipped, enabling MITM. The TALOS analysis sources the issue to improper certificate validation (CWE-295) in the MQTTS handshake, with the code paths GetConnected and NetworkConnectTLS sh...