Honeywell Opc Ua Tunneller — known CVE vulnerabilities

Every CVE whose affected-product data names Honeywell Opc Ua Tunneller, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-27297 — CVSS 9.8 (critical): The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values…
• CVE-2020-27299 — CVSS 9.1 (critical): The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information…
• CVE-2020-27274 — CVSS 7.5 (high): Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to…
• CVE-2020-27295 — CVSS 7.5 (high): The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on…