Description (CNA)
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| M&M Software / fdtCONTAINER Component | affected unspecified before 3.5; affected 3.5 before 3.5.20304.x; affected 3.6 before 3.6.20304.x |
| M&M Software / fdtCONTAINER Application | affected unspecified before 4.5; affected 4.5 before 4.5.20304.x; affected 4.6 before 4.6.20304.x |
| M&M Software / dtmlINSPECTOR | affected 3 |
| Pepperl+Fuchs/PACTware / PACTware | affected unspecified through 5.0.5.31 |
| Weidmüller / WI Manager | affected unspecified through 2.5.1 |
CWE
CWE-502
References
- https://cert.vde.com/en-us/advisories/vde-2020-038
- https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05
ADP enrichment
No English description supplied.