---
id: 7329
title: "CVE-2020-27265 (Pre-auth on KEPWARE products)"
cve: CVE-2020-27265
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cve-2020-27265/"
published_at: "2023-05-26T12:56:45Z"
tags: ["vulnerability", "ot-security", "stack-overflow", "kepware", "opc-ua", "cve-2020-27265"]
phying_url: "https://phying.com/item/7329"
lang: en
---

# CVE-2020-27265 (Pre-auth on KEPWARE products)

## Summary

A walkthrough of CVE-2020-27265, a pre-auth stack overflow in KEPware's OPC UA implementation, showing how oversized OPC strings overflow a 1024-byte buffer during protocol handshake processing.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2020-27265
- **Published:** 2023-05-26T12:56:45Z
- **Original:** https://blog.viettelcybersecurity.com/cve-2020-27265/
- **Phying News:** https://phying.com/item/7329