Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2021-32933

MDT AutoSave Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MDT Software MDT AutoSave

  • unspecified to < 6.02.06affected

MDT Software MDT AutoSave

  • 7.00 to < 7.04affected

MDT Software AutoSave for System Platform (A4SP)

  • unspecified to < 4.01affected

MDT Software A4SP

  • 5.00affected

References