Honeywell: >> Opc Ua Tunneller Security Vulnerabilities
The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).
CVSS Score
7.5
EPSS Score
0.003
Published
2021-01-26
The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller (versions prior to 6.3.0.8233).
CVSS Score
9.1
EPSS Score
0.002
Published
2021-01-26
Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).
CVSS Score
7.5
EPSS Score
0.004
Published
2021-01-26
The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller (versions prior to 6.3.0.8233).
CVSS Score
9.8
EPSS Score
0.004
Published
2021-01-26