CVE-2020-27299: Critical severity matrikon opc ua tunneller vulnerability
Published Jan 26, 2021
·Updated
The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller (versions prior to 6.3.0.8233).
Affected Software
2 affected componentsFixes available
Matrikon, a subsidiary of Honeywell OPC UA Tunneller<6.3.0.8233
6.3.0.8233
Honeywell Opc Ua Tunneller<6.3.0.8233
Event History
Jan 26, 2021
CVE Published
via MITRE·07:04 PM
Data Sourced
via MITRE·07:04 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-27299?
CVE-2020-27299 is a vulnerability in the OPC UA Tunneller that allows an attacker to obtain sensitive data or crash the device.
2
How severe is the CVE-2020-27299 vulnerability?
The severity of CVE-2020-27299 is critical with a CVSS score of 9.1.
3
Which product is affected by CVE-2020-27299?
The OPC UA Tunneller versions prior to 6.3.0.8233 are affected by CVE-2020-27299.
4
What can an attacker do with CVE-2020-27299?
An attacker can obtain and disclose sensitive data or cause the device to crash with CVE-2020-27299.
5
Is there a fix available for CVE-2020-27299?
To mitigate CVE-2020-27299, update the OPC UA Tunneller to version 6.3.0.8233 or newer.