SB2022020705 - Multiple vulnerabilities in Sealevel Systems SeaConnect 370W

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022020705

SB2022020705 - Multiple vulnerabilities in Sealevel Systems SeaConnect 370W

Published: February 7, 2022

Security Bulletin ID SB2022020705
Severity
High
Patch available
YES
Number of vulnerabilities 12
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 75% Medium 25%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 12 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2021-21968)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to insufficient validation of user-supplied input in the OTA update task functionality. A remote attacker can perform a man-in-the-middle attack and overwrite arbitrary files.


2) Improper Certificate Validation (CVE-ID: CVE-2021-21959)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to improper certificate validation in the MQTTS functionality. A remote attacker can perform a man-in-the-middle attack and control the device functionality.


3) Improper access control (CVE-ID: CVE-2021-21965)

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in the Modbus/SeaMAX Remote Configuration functionality within SeaMAX Ethernet API. A remote attacker can bypass implemented security restrictions and perform a denial of service (DoS) attack.


4) Improper access control (CVE-ID: CVE-2021-21964)

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in the Modbus/SeaMAX Remote Configuration functionality within Modbus Interface. A remote attacker can bypass implemented security restrictions and perform a denial of service (DoS) attack.


5) Buffer overflow (CVE-ID: CVE-2021-21967)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error in the OTA update task functionality. A remote attacker can perform a man-in-the-middle attack, trigger memory corruption and cause a denial of service condition on the target system.


6) Stack-based buffer overflow (CVE-ID: CVE-2021-21961)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the NBNS functionality. A remote unauthenticated attacker can send a specially crafted packet, trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


7) Stack-based buffer overflow (CVE-ID: CVE-2021-21960)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the LLMNR functionality. A remote unauthenticated attacker can send a specially crafted packet, trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


8) Out-of-bounds write (CVE-ID: CVE-2021-21971)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in the URL_decode functionality. A remote attacker can perform a man-in-the-middle attack, trigger out-of-bounds write and execute arbitrary code on the target system.


9) Missing Encryption of Sensitive Data (CVE-ID: CVE-2021-21963)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to missing encryption of sensitive data in the Web Server functionality. A remote attacker can perform a man-in-the-middle attack and gain unauthorized access to sensitive information on the system.


10) Out-of-bounds write (CVE-ID: CVE-2021-21970)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in the HandleSeaCloudMessage functionality within the json name key value. A remote attacker can perform a man-in-the-middle attack, trigger out-of-bounds write and execute arbitrary code on the target system.


11) Out-of-bounds write (CVE-ID: CVE-2021-21969)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in the HandleSeaCloudMessage functionality within the json payload key value. A remote attacker can perform a man-in-the-middle attack, trigger out-of-bounds write and execute arbitrary code on the target system.


12) Heap-based buffer overflow (CVE-ID: CVE-2021-21962)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the OTA Update u-download functionality. A remote attacker can perform a man-in-the-middle attack, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install update from vendor's website.

References