CVE-2020-27274: High severity matrikon opc ua tunneller vulnerability
Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-27274?
CVE-2020-27274 is a vulnerability in the parsing functions of the Honeywell OPC UA Tunneller that can lead to a denial-of-service condition.
What is the severity of CVE-2020-27274?
CVE-2020-27274 has a severity rating of 7.5, which is considered high.
How does CVE-2020-27274 affect the Honeywell OPC UA Tunneller?
CVE-2020-27274 affects versions prior to 6.3.0.8233 of the Honeywell OPC UA Tunneller.
How can the denial-of-service condition be triggered by CVE-2020-27274?
The denial-of-service condition can be triggered when parsing functions in the affected product do not check the return value of malloc, leading to the forced closure of the thread handling the message.
Is there a fix available for CVE-2020-27274?
Yes, the fix for CVE-2020-27274 is to update the Honeywell OPC UA Tunneller to version 6.3.0.8233 or later.