Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-32957

MDT AutoSave Uncontrolled Search Path Element

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is therefore vulnerable to binary hijacking.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MDT Software MDT AutoSave

  • unspecified to < 6.02.06affected

MDT Software MDT AutoSave

  • 7.00 to < 7.04affected

MDT Software AutoSave for System Platform (A4SP)

  • unspecified to < 4.01affected

MDT Software A4SP

  • 5.00affected

References