Deserialization of untrusted data

2021-01-2219:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.2%

JSON

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

CPENameOperatorVersion
io-link_master_firmwarele1.5.48
pactwarege5.0
pactwarele5.0.5.31
fdtcontainer_applicationlt4.5
fdtcontainer_applicationge4.6.0
fdtcontainer_applicationle4.6.20304
fdtcontainer_applicationge4.5.0
fdtcontainer_applicationle4.5.20304
fdtcontainer_componentge3.5.0
fdtcontainer_componentle3.5.20304

Name	Operator	Version
io-link_master_firmware	le	1.5.48
pactware	ge	5.0
pactware	le	5.0.5.31
fdtcontainer_application	lt	4.5
fdtcontainer_application	ge	4.6.0
fdtcontainer_application	le	4.6.20304
fdtcontainer_application	ge	4.5.0
fdtcontainer_application	le	4.5.20304
fdtcontainer_component	ge	3.5.0
fdtcontainer_component	le	3.5.20304