CVE-2020-12525: Emerson Rosemount Transmitter Interface Software

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

Affected products

• Emerson Rosemount Transmitter Interface Software: affected versions not specified
• Pepperl-Fuchs Io-Link Master Firmware: up to and including 1.5.48
• Pepperl-Fuchs Pactware: from 5.0, up to and including 5.0.5.31
• Wago Dtminspector 3: affected versions not specified
• Wago Fdtcontainer Application: before 4.5 (fixed in 4.5); from 4.5.0, up to and including 4.5.20304; from 4.6.0, up to and including 4.6.20304
• Wago Fdtcontainer Component: before 3.5 (fixed in 3.5); from 3.5.0, up to and including 3.5.20304; from 3.6.0, up to and including 3.6.20304
• Weidmueller Wi Manager: up to and including 2.5.1

Published 2021-01-22. Last modified 2026-06-17.