Vulnerability · Published Apr 1, 2022 · Assigned by icscert
CVE-2021-32961MDT AutoSave Unrestricted Upload of File with Dangerous Type
High 7.5
In plain English
A high-severity unrestricted file upload in A4SP from MDT Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.3%top 30.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks for and get execution capabilities.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| MDT Software | MDT AutoSave | unspecified – before 6.02.06 |
| MDT Software | MDT AutoSave | 7.00 – before 7.04 |
| MDT Software | AutoSave for System Platform (A4SP) | unspecified – before 4.01 |
| MDT Software | A4SP | 5.00 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02 x_refsource_CONFIRM