Skip to content
OpenAdvisories
High ICSA-21-021-05 1 CVE

WAGO M&M Software fdtCONTAINER (Update C)

Published Jan 21, 2021 · Updated Jun 17, 2021 · Revision 4

Vendor: M&M Software GmbH, WAGO Kontakttechnik Product: dtmINSPECTOR Product: Emerson Rosemount Transmitter Interface Software (RTIS) SKUs Product: fdtCONTAINER Product: Mitsubishi Electric MELSOFT FieldDeviceConfigurator Product: PEPPERL+FUCHS PACTware Product: Weidmüller WI Manager

Summary

If an attacker can socially engineer a valid user into loading a manipulated project file, malicious code can be executed without notice.

Vulnerabilities 1

  • High 7.3
    CVE-2020-12525

    WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component

    M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

    Weidmüller M&M Software Pepperl+Fuchs/PACTware WI Manager

Revision history

  1. #4

    ICSA-21-021-05 WAGO M&M Software fdtCONTAINER (Update C)

  2. #3

    ICSA-21-021-05 WAGO M&M Software fdtCONTAINER (Update B)

  3. #2

    ICSA-21-021-05 WAGO M-M Software fdtCONTAINER (Update A)

  4. #1

    ICSA-21-021-05 WAGO M&M Software fdtCONTAINER

References