CVE-2020-27297

CRITICAL

9.8

Descripcion

The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller (versions prior to 6.3.0.8233).

Detalles CVE

Puntuacion CVSS v3.19.8

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado1/26/2021

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

honeywell:opc_ua_tunneller

Debilidades (CWE)

CWE-122CWE-787

Referencias

https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03(ics-cert@hq.dhs.gov)

https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.