Vulnerability Spotlight: Multiple vulnerabilities in Sealevel Sea Connect

Summary: Cisco Talos discovered multiple vulnerabilities in Sealevel Systems' SeaConnect 370W, a WiFi-connected ICS edge device, including three buffer overflows (TALOS-2021-1389 and TALOS-2021-1390) with severity scores of 10.0, 10.0 and 9.0 that could allow arbitrary code execution. A separate flaw, TALOS-2021-1388, eases man-in-the-middle attacks between the device and the SeaConnect cloud service, and while conducting such an attack an adversary could exploit other reported issues to overwrite files, cause out-of-bounds writes or trigger denial of service; Sealevel and the Eclipse Foundation have fixed the issues and users are advised to update from version 1.3.34.
What's compelling: Three of these flaws carry severity scores of 10.0 and 9.0 on a device built to remotely monitor and control real-world I/O in industrial environments, so successful exploitation reaches physical processes, not just data.

Read the original at Cisco Talos ↗

Topics: OT / ICS & Critical Infrastructure
Mentions: CVE-2021-21959 CVE-2021-21960 CVE-2021-21961 CVE-2021-21962 CVE-2021-21963 CVE-2021-21964 CVE-2021-21965 CVE-2021-21967 CVE-2021-21968 CVE-2021-21969 CVE-2021-21970 CVE-2021-21971 CVE-2021-41036
Related: Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026
How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026
Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026