CVE-2020-12525
22.01.2021, 19:15
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.Enginsight
| Vendor | Product | Version |
|---|---|---|
| emerson | rosemount_transmitter_interface_software | - |
| pepperl-fuchs | pactware | 5.0 ≤ 𝑥 ≤ 5.0.5.31 |
| wago | dtminspector_3 | - |
| wago | fdtcontainer_application | 𝑥 < 4.5 |
| wago | fdtcontainer_application | 4.5.0 ≤ 𝑥 ≤ 4.5.20304 |
| wago | fdtcontainer_application | 4.6.0 ≤ 𝑥 ≤ 4.6.20304 |
| wago | fdtcontainer_component | 𝑥 < 3.5 |
| wago | fdtcontainer_component | 3.5.0 ≤ 𝑥 ≤ 3.5.20304 |
| wago | fdtcontainer_component | 3.6.0 ≤ 𝑥 ≤ 3.6.20304 |
| weidmueller | wi_manager | 𝑥 ≤ 2.5.1 |
| pepperl-fuchs | io-link_master_firmware | 𝑥 ≤ 1.5.48 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration