M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12525
Reference (s):
- https://cert.vde.com/en-us/advisories/vde-2020-038
- URL: https://cert.vde.com/en-us/advisories/vde-2020-038
- https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05