by Kastro
Paper/Archive/CVE-2020-27297

CVE-2020-27297

icscert — The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled valu…

EPSS 3%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 84.8.848 × 2017.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller (versions prior to 6.3.0.8233).

Affected

ProductAffectedFixed inSource
OPC UA TunnellerAll versions prior to 6.3.0.8233–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsa-21-021-03