Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fmc6-6r82-9j7v

Опубликовано: 10 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to arbitrary file overwrite. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to arbitrary file overwrite. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

EPSS

Процентиль: 61%
0.00419
Низкий

7.4 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.3
nvd
около 4 лет назад

A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to arbitrary file overwrite. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

EPSS

Процентиль: 61%
0.00419
Низкий

7.4 High

CVSS3

Дефекты

CWE-20