CVE-2020-27299

9.1 criticalEPSS 1.7%

Critical (9.1) in honeywell opc ua tunneller. EPSS 1.7% chance of exploitation in the next 30 days.

The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller (versions prior to 6.3.0.8233).

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2021-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

honeywell:opc_ua_tunneller

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03

Check your stack JSON