CVE-2020-12525

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 22-01-2021 08:15

Last modified: - 10-02-2022 06:57

Total changes: - 5

Description

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

Required

User interaction

7.8

Base score

1.8

5.9

Exploitability score

Impact score

Verification logic

vendor=emerson AND product=rosemount_transmitter_interface_software AND version=-

vendor=pepperl-fuchs AND product=pactware AND versionEndIncluding=5.0.5.31 AND versionStartIncluding=5.0

vendor=wago AND product=dtminspector_3 AND version=-

vendor=wago AND product=fdtcontainer_application AND versionEndExcluding=4.5

vendor=wago AND product=fdtcontainer_application AND versionEndIncluding=4.5.20304 AND versionStartIncluding=4.5.0

vendor=wago AND product=fdtcontainer_application AND versionEndIncluding=4.6.20304 AND versionStartIncluding=4.6.0

vendor=wago AND product=fdtcontainer_component AND versionEndExcluding=3.5

vendor=wago AND product=fdtcontainer_component AND versionEndIncluding=3.5.20304 AND versionStartIncluding=3.5.0

vendor=wago AND product=fdtcontainer_component AND versionEndIncluding=3.6.20304 AND versionStartIncluding=3.6.0

vendor=weidmueller AND product=wi_manager AND versionEndIncluding=2.5.1

AND

vendor=pepperl-fuchs AND product=io-link_master_firmware AND versionEndIncluding=1.5.48

vendor=pepperl-fuchs AND product=io-link_master_4-eip AND version=-

vendor=pepperl-fuchs AND product=io-link_master_4-pnio AND version=-

vendor=pepperl-fuchs AND product=io-link_master_8-eip AND version=-

vendor=pepperl-fuchs AND product=io-link_master_8-eip-l AND version=-

vendor=pepperl-fuchs AND product=io-link_master_8-pnio AND version=-

vendor=pepperl-fuchs AND product=io-link_master_8-pnio-l AND version=-

vendor=pepperl-fuchs AND product=io-link_master_dr-8-eip AND version=-

vendor=pepperl-fuchs AND product=io-link_master_dr-8-eip-p AND version=-

vendor=pepperl-fuchs AND product=io-link_master_dr-8-eip-t AND version=-

vendor=pepperl-fuchs AND product=io-link_master_dr-8-pnio AND version=-

vendor=pepperl-fuchs AND product=io-link_master_dr-8-pnio-p AND version=-

vendor=pepperl-fuchs AND product=io-link_master_dr-8-pnio-t AND version=-

Reference

Keywords

CVE-2020-12525

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-12525

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures