Heap overflow

The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27295

The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27295

CVE-2020-27295 affects Honeywell/Matrikon OPC UA Tunneller; versions prior to 6.3.0.8233 are vulnerable to uncontrolled resource consumption that may cause a denial-of-service. Mitigation: upgrade to version 6.3.0.8233. Other related documents also describe additional issues in the same product f...

CVE-2020-27297

The CVE-2020-27297 issue affects the OPC UA Tunneller (Matrikon, Honeywell) prior to version 6.3.0.8233. The vulnerability is a heap-based buffer overflow in the Tunneller component that can allow an attacker to manipulate memory and remotely execute code. Affected product versions are specifical...

CVE-2020-27299

The CVE-2020-27299 entry affects the OPC UA Tunneller (Matrikon/Honeywell) before version 6.3.0.8233. It is an out-of-bounds read vulnerability that may allow an attacker to obtain and disclose sensitive data or cause the device to crash. Red Hat/CISA documents confirm the product and version aff...

CVE-2020-27299

The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27274

Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27274

CVE-2020-27274 affects Honeywell/Matrikon OPC UA Tunneller prior to version 6.3.0.8233. Root cause: some parsing functions do not check malloc return values, causing the message-handling thread to terminate and potentially trigger a denial-of-service. Impact: DoS with availability impact (per NVD...

Honeywell OPC UA Tunneller Buffer Error Vulnerability

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A buffer error vulnerability exists that could allow an attacker to disclose sensitive information, remotely...

Honeywell OPC UA Tunneller Buffer Error Vulnerability

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A buffer error vulnerability exists that could allow an attacker to disclose sensitive information, remotely...

Honeywell OPC UA Tunneller Resource Management Error Vulnerability

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A resource management error vulnerability exists that could allow an attacker to disclose sensitive information,...

Honeywell OPC UA Tunneller Code Issue Vulnerability

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A code issue vulnerability exists that could allow an attacker to disclose sensitive information, remotely execu...

Honeywell OPC UA Tunneller

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Matrikon, a subsidiary of Honeywell Equipment: OPC UA Tunneller Vulnerabilities: Heap-based Buffer Overflow, Out-of-bounds Read, Improper Check for Unusual or Exceptional Conditions, Uncontrolled...