high7.3
CVE-2020-12525
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its pro…
Impact
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emerson | Rosemount Transmitter Interface Software | All versions |
| Pepperl-Fuchs | Pactware | from 5.0 through 5.0.5.31 |
| Wago | Dtminspector 3 | All versions |
| Wago | Fdtcontainer Application | before 4.5 from 4.5.0 through 4.5.20304 from 4.6.0 through 4.6.20304 |
| Wago | Fdtcontainer Component | before 3.5 from 3.5.0 through 3.5.20304 from 3.6.0 through 3.6.20304 |
| Weidmueller | Wi Manager | through 2.5.1 |
| Pepperl-Fuchs | Io-Link Master Firmware | through 1.5.48 |