Heap overflow

The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27295

The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27295

CVE-2020-27295 affects Honeywell/Matrikon OPC UA Tunneller; versions prior to 6.3.0.8233 are vulnerable to uncontrolled resource consumption that may cause a denial-of-service. Mitigation: upgrade to version 6.3.0.8233. Other related documents also describe additional issues in the same product f...

CVE-2020-27297

The CVE-2020-27297 issue affects the OPC UA Tunneller (Matrikon, Honeywell) prior to version 6.3.0.8233. The vulnerability is a heap-based buffer overflow in the Tunneller component that can allow an attacker to manipulate memory and remotely execute code. Affected product versions are specifical...

CVE-2020-27299

The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27299

The CVE-2020-27299 entry affects the OPC UA Tunneller (Matrikon/Honeywell) before version 6.3.0.8233. It is an out-of-bounds read vulnerability that may allow an attacker to obtain and disclose sensitive data or cause the device to crash. Red Hat/CISA documents confirm the product and version aff...

CVE-2020-27274

CVE-2020-27274 affects Honeywell/Matrikon OPC UA Tunneller prior to version 6.3.0.8233. Root cause: some parsing functions do not check malloc return values, causing the message-handling thread to terminate and potentially trigger a denial-of-service. Impact: DoS with availability impact (per NVD...

CVE-2020-27274

Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

PT-2021-11358

Name of the Vulnerable Software and Affected Versions: OPC UA Tunneller versions prior to 6.3.0.8233 Description: The issue arises from some parsing functions in the affected product not checking the return value of malloc, which can force the thread handling the message to close. This may lead t...

CVE-2020-27295: Uncontrolled Resource Consumption

The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27274: Improper Check for Unusual or Exceptional Conditions

Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

PT-2021-11376

Name of the Vulnerable Software and Affected Versions: OPC UA Tunneller versions prior to 6.3.0.8233 Description: The issue is related to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition. Recommendations: For versions prior to 6.3.0.8233, updat...

CVE-2020-27297: Heap-based Buffer Overflow

The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller versions prior to 6.3.0.8233...

PT-2021-11377

Name of the Vulnerable Software and Affected Versions: OPC UA Tunneller versions prior to 6.3.0.8233 Description: The issue is related to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code. Recommendations: For versions...

CVE-2020-27299: Out-of-bounds Read

The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller versions prior to 6.3.0.8233...

PT-2021-11379

Name of the Vulnerable Software and Affected Versions: OPC UA Tunneller versions prior to 6.3.0.8233 Description: The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash. Recommendation...

Honeywell OPC UA Tunneller Code Issue Vulnerability

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A code issue vulnerability exists that could allow an attacker to disclose sensitive information, remotely execu...

Honeywell OPC UA Tunneller Buffer Error Vulnerability

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A buffer error vulnerability exists that could allow an attacker to disclose sensitive information, remotely...

Honeywell OPC UA Tunneller Resource Management Error Vulnerability

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A resource management error vulnerability exists that could allow an attacker to disclose sensitive information,...

Honeywell OPC UA Tunneller Buffer Error Vulnerability

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A buffer error vulnerability exists that could allow an attacker to disclose sensitive information, remotely...