CVE-2020-27274

Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).

Summary:

Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).

Reference Links(if available):

  • https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)