Schneider Electric Modicon Controllers and Software (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : EcoStruxure Control Expert, EcoStruxure Process Expert, SCADAPack RemoteConnect x70, SCADAPack x70 RTUs, and Modicon M580 and M340 control products Vulnerabilities :...

CVE-2020-12525

creationtimestamp| type| source ---|---|--- 2021-01-22 22:29:28+00:00| seen| https://t.me/cibsecurity/22536 2021-07-15 11:07:30+00:00| seen| https://t.me/icscert/462...

CVE-2020-12525

CVE-2020-12525 describes a deserialization of untrusted data in the fdtCONTAINER component used by M&M Software (and related products). Affected versions include below 3.5.20304.x and between 3.6 and 3.6.20304.x for the fdtCONTAINER component (and related application versions). The vulnerability ...

WAGO M&M Software fdtCONTAINER (Update C)

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: M&M Software GmbH, a subsidiary of WAGO Kontakttechnik Equipment: fdtCONTAINER Vulnerability: Deserialization of Untrusted Data 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...