A misconfiguration exists in the MQTTS functionality of Sealevel Systems Inc. SeaConnect 370W v1.3.34. This misconfiguration significantly simplifies a man-in-the-middle attack which directly leads to control of device functionality.