MDT AutoSave Unrestricted Upload of File with Dangerous Type
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-434.
Summary
A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks for and get execution capabilities.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| MDT Software | MDT AutoSave | before 6.02.06 | 6.02.06 | Patch available | CNA |
| MDT Software | MDT AutoSave | 7.00 to before 7.04 | 7.04 | Patch available | CNA |
| MDT Software | AutoSave for System Platform (A4SP) | before 4.01 | 4.01 | Patch available | CNA |
| MDT Software | A4SP | 5.00 | — | No fix listed | CNA |
- MDT AutoSave VendorMDT Software Affected before 6.02.06 Fixed in 6.02.06 Patch available CNA
- MDT AutoSave VendorMDT Software Affected 7.00 to before 7.04 Fixed in 7.04 Patch available CNA
- AutoSave for System Platform (A4SP) VendorMDT Software Affected before 4.01 Fixed in 4.01 Patch available CNA
- A4SP VendorMDT Software Affected 5.00 Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:auvesy-mdt:autosave:*:*:*:*:*:*:*:* | before 6.02.06; 7.00 – 7.04 | Vulnerable | MDT Software |
| cpe:2.3:a:auvesy-mdt:autosave_for_system_platform:*:*:*:*:*:*:*:* | before 4.01 | Vulnerable | MDT Software |
| cpe:2.3:a:auvesy-mdt:autosave_for_system_platform:5.00:*:*:*:*:*:*:* | 5.00 | Vulnerable | MDT Software |
- cpe:2.3:a:auvesy-mdt:autosave:*:*:*:*:*:*:*:* Versions before 6.02.06; 7.00 – 7.04 Vulnerable ·MDT Software
- cpe:2.3:a:auvesy-mdt:autosave_for_system_platform:*:*:*:*:*:*:*:* Versions before 4.01 Vulnerable ·MDT Software
- cpe:2.3:a:auvesy-mdt:autosave_for_system_platform:5.00:*:*:*:*:*:*:* Versions 5.00 Vulnerable ·MDT Software
Remediation
- Fix · CNA MDT AutoSave (MDT Software) Fixed in 6.02.06
- Fix · CNA MDT AutoSave (MDT Software) Fixed in 7.04
- Fix · CNA AutoSave for System Platform (A4SP) (MDT Software) Fixed in 4.01
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
MDT Software AutoSave for System Platform (A4SP), MDT AutoSave 4.01, 6.02.06, 7.04
7 records Highest priority Priority MEDIUM 6 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2021-12562 MDT AutoSave SQL InjectionPriority MEDIUM 51
- TI-2021-12542 MDT AutoSave Command InjectionPriority MEDIUM 51
- TI-2021-12566 MDT AutoSave Uncontrolled Search Path ElementPriority MEDIUM 41
Timeline
- 2026-10-02 Threatist record created from CVE-2021-32961
- 2026-10-03 Alias added: GHSA-5xp6-vv6v-2vr5
References
More MDT Software Autosave vulnerabilities
- TI-2021-12562 MDT AutoSave SQL Injection CVSS 3.1CRITICAL 9.8
- TI-2021-12542 MDT AutoSave Command Injection CVSS 3.1CRITICAL 10.0
- TI-2021-12566 MDT AutoSave Uncontrolled Search Path Element CVSS 3.1HIGH 7.5
- TI-2021-12558 MDT AutoSave Relative Path Traversal CVSS 3.1HIGH 7.5
- TI-2021-12546 MDT AutoSave Generation of Error Message Containing Sensitive Information CVSS 3.1HIGH 7.5
- TI-2021-12554 MDT AutoSave Inadequate Encryption Strength CVSS 3.1HIGH 7.5
Sources
- CVE-2021-32961 · CVE Program
- CVE-2021-32961 · NVD
- FIRST EPSS
- GHSA-5xp6-vv6v-2vr5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences