Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2020-12525

WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

M&M Software fdtCONTAINER Component

  • unspecified to < 3.5affected
  • 3.5 to < 3.5.20304.xaffected
  • 3.6 to < 3.6.20304.xaffected

M&M Software fdtCONTAINER Application

  • unspecified to < 4.5affected
  • 4.5 to < 4.5.20304.xaffected
  • 4.6 to < 4.6.20304.xaffected

M&M Software dtmlINSPECTOR

  • 3affected

Pepperl+Fuchs/PACTware PACTware

  • unspecified to ≤ 5.0.5.31affected

Weidmüller WI Manager

  • unspecified to ≤ 2.5.1affected

References