admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-09-17 18:45:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2020/CVE-2020-125xx/CVE-2020-12525.json
cad-safe-bot e6cbafdc40 Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00

301 lines
10 KiB
JSON
Raw Blame History

{
"id": "CVE-2020-12525",
"sourceIdentifier": "info@cert.vde.com",
"published": "2021-01-22T19:15:12.443",
"lastModified": "2024-11-21T04:59:52.110",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage."
},
{
"lang": "es",
"value": "El componente fdtCONTAINER de M&M Software en versiones por debajo de 3.5.20304.x y entre 3.6 y 3.6.20304.x, es vulnerable a una deserializaci\u00f3n de datos que no son de confianza en el almacenamiento de su proyecto"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "info@cert.vde.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
},
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"baseScore": 6.8,
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"weaknesses": [
{
"source": "info@cert.vde.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
},
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:emerson:rosemount_transmitter_interface_software:-:*:*:*:*:*:*:*",
"matchCriteriaId": "74D63DB1-9EC0-4198-A7C4-243169F2BAE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pepperl-fuchs:pactware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.0",
"versionEndIncluding": "5.0.5.31",
"matchCriteriaId": "A5C2E91B-B550-45A6-B2F9-33CE38DC20B2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wago:dtminspector_3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E5720340-CED1-4944-BD7B-2BAEF771A84A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5",
"matchCriteriaId": "D9960023-1704-4322-A7F5-48BEA28D4A4A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.5.0",
"versionEndIncluding": "4.5.20304",
"matchCriteriaId": "F6045339-C7DD-4BB3-AE65-ED2E47DEBE2F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.6.0",
"versionEndIncluding": "4.6.20304",
"matchCriteriaId": "CC96D4F1-0492-4747-89D2-7E7B07C4187F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5",
"matchCriteriaId": "9DE11E01-09CC-4F66-AD04-026D29DF7171"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.5.0",
"versionEndIncluding": "3.5.20304",
"matchCriteriaId": "CD473DF7-23BE-414F-9E3D-9280303FD1FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.6.0",
"versionEndIncluding": "3.6.20304",
"matchCriteriaId": "8AC44D07-AAC5-4A6E-AD16-30D26E5EBF34"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:weidmueller:wi_manager:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.5.1",
"matchCriteriaId": "157A3D79-5A38-45F7-96C7-0504B2367DA6"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:pepperl-fuchs:io-link_master_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.5.48",
"matchCriteriaId": "79BE3599-8D93-4FDB-A3AA-6EA0A6261FDA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_4-eip:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BBEBC489-E022-4DFC-9CEB-56CFE6390EFE"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_4-pnio:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2E69B5DC-3B1C-4FDB-88B2-A8D9AB75C43E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-eip:-:*:*:*:*:*:*:*",
"matchCriteriaId": "83573CB5-AEFE-496F-B5AC-218CDE60DC74"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-eip-l:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E00DEDAE-F737-4E8B-8D75-5B00DC357DEB"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-pnio:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EC03E5F9-08B6-4AE8-8B12-843E4A22FC67"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-pnio-l:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CD25566D-513D-4BA3-8035-CC724E523898"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FA2F24AD-E230-47C9-A6C1-241649CC7C6A"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip-p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8E0C433E-211D-4618-A891-126067DBF78F"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "70A4F878-EB5A-4733-8882-93707F58C2C5"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2D97A0A5-3BA7-4D22-83EB-D3C856D641E6"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio-p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A3F02A39-35DC-4D14-91A0-46C9448FA562"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E91F7C2F-044D-496D-8086-8FE041EB930A"
}
]
}
]
}
],
"references": [
{
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038",
"source": "info@cert.vde.com",
"tags": [
"Not Applicable",
"Third Party Advisory"
]
},
{
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05",
"source": "info@cert.vde.com",
"tags": [
"Third Party Advisory",
"US Government Resource"
]
},
{
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable",
"Third Party Advisory"
]
},
{
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"US Government Resource"
]
}
]
}
Reference in New Issue View Git Blame Copy Permalink