Heap-Based Buffer Overflow in OPC UA Tunneller by Softing
CVE-2020-27297

9.8CRITICAL

Key Information:

Vendor

Honeywell

Status
Opc Ua Tunneller
Vendor
CVE Published:
26 January 2021

What is CVE-2020-27297?

The OPC UA Tunneller by Softing is susceptible to a heap-based buffer overflow vulnerability that could allow an attacker to manipulate memory with chosen values. This could lead to unauthorized remote code execution on affected versions, specifically those released prior to 6.3.0.8233. Ensuring that systems are updated to the latest version is essential for mitigation.

Affected Version(s)

OPC UA Tunneller All versions prior to 6.3.0.8233

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.