CVE-2021-21970

An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. The HandleIncomingSeaCloudMessage function uses at 3 the jsonobjectgetstring to populate the pname global variable. The pname is only 0x80 bytes long, and the...

CVE-2021-21970

SeaConnect 370W (v1.3.34) contains two out-of-bounds write vulnerabilities in HandleSeaCloudMessage. The parser uses json_object_get_string to extract name and payload from MQTT messages; p_name is only 0x80 bytes and p_payload is 0x100 bytes, while messages can be up to 0x201 bytes. json_object_...