Honeywell Opc Ua Tunneller vulnerabilities

4 CVEs affecting Honeywell Opc Ua Tunneller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-27295, published 2021-01-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27297, published 2021-01-26. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller (versions…
CVE-2020-27299, published 2021-01-26. Critical severity, CVSS 9.1. EPSS: 1.7% chance of exploitation in the next 30 days. The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller…
CVE-2020-27295, published 2021-01-26. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).
CVE-2020-27274, published 2021-01-26. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the…