CVE-2020-27299

2021-01-2619:04:56

CWE-125

icscert

www.cve.org

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller (versions prior to 6.3.0.8233).

CNA Affected

[
  {
    "product": "OPC UA Tunneller",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 6.3.0.8233"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-021-03