CVE-2020-12525highCWE-502

CVE-2020-12525: high-severity vulnerability in M&M Software fdtCONTAINER Component

WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component

Published · Updated

Follow this CVE+ Monitor dtmlINSPECTOR+ Monitor fdtCONTAINER Application

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3epss 1.4%
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
M&M Software · dtmlINSPECTORM&M Software · fdtCONTAINER ApplicationM&M Software · fdtCONTAINER ComponentPepperl+Fuchs/PACTware · PACTwareWeidmüller · WI Manager