Mdt Autosave
Approved changes feed: RSS · Atom
cpe:2.3:a:mdt_software:mdt_autosave:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mdt Software (9b3218bd-cd4c-520d-ac4e-a04c02201166) |
|---|---|
| Product | Mdt Autosave (695ad0af-ec8e-5a43-bc08-2808a813e4f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-32961 |
vulnerable | 2026-06-08 05:32:08.269012 |
MDT AutoSave Unrestricted Upload of File with Dangerous Type
HIGH (7.5)
A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks for and get execution capabilities.
Published: 2022-04-01T22:17:04.000Z
Updated: 2025-04-16T16:34:53.745Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32957 |
vulnerable | 2026-06-08 05:32:08.256549 |
MDT AutoSave Uncontrolled Search Path Element
HIGH (7.5)
A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is therefore vulnerable to binary hijacking.
Published: 2022-04-01T22:17:08.000Z
Updated: 2025-04-16T16:34:14.242Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32953 |
vulnerable | 2026-06-08 05:32:08.251439 |
MDT AutoSave SQL Injection
CRITICAL (9.8)
An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login.
Published: 2022-04-01T22:17:05.000Z
Updated: 2025-04-16T16:34:44.784Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32949 |
vulnerable | 2026-06-08 05:32:08.244469 |
MDT AutoSave Relative Path Traversal
HIGH (7.5)
An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file.
Published: 2022-04-01T22:17:09.000Z
Updated: 2025-04-16T16:34:03.231Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32945 |
vulnerable | 2026-06-08 05:32:08.242630 |
MDT AutoSave Inadequate Encryption Strength
HIGH (7.5)
An attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06.
Published: 2022-04-01T22:17:10.000Z
Updated: 2025-04-16T16:33:53.886Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32937 |
vulnerable | 2026-06-08 05:32:08.226534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32933 |
vulnerable | 2026-06-08 05:32:08.215342 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.