CVE-2020-27297

9.8 criticalEPSS 2.5%

Critical (9.8) in honeywell opc ua tunneller. EPSS 2.5% chance of exploitation in the next 30 days.

The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller (versions prior to 6.3.0.8233).

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-122
Published: 2021-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

honeywell:opc_ua_tunneller

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03

Check your stack JSON