VULNERABILITY INTELLIGENCE

CVE-2020-12525

CVSS score7.3 HIGH

EPSS probability1.36%

CISA KEVNot currently listed

Published2021-01-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

Weakness classification

info@cert.vde.com: CWE-502
nvd@nist.gov: CWE-502

Primary references

info@cert.vde.com — Not Applicable, Third Party Advisory
info@cert.vde.com — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource