NetSight
high7.3

CVE-2020-12525

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its pro…

Impact

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

Affected products

VendorProductAffected versions
EmersonRosemount Transmitter Interface Software
All versions
Pepperl-FuchsPactware
from 5.0 through 5.0.5.31
WagoDtminspector 3
All versions
WagoFdtcontainer Application
before 4.5
from 4.5.0 through 4.5.20304
from 4.6.0 through 4.6.20304
WagoFdtcontainer Component
before 3.5
from 3.5.0 through 3.5.20304
from 3.6.0 through 3.6.20304
WeidmuellerWi Manager
through 2.5.1
Pepperl-FuchsIo-Link Master Firmware
through 1.5.48

Weakness classification

References