← CVE Intelligence

CVE-2021-32933

MDT AutoSave Command Injection PUBLISHED

Description (CNA)

An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious process.

Affected (CNA)

Vendor / productVersions
MDT Software / MDT AutoSaveaffected unspecified before 6.02.06
MDT Software / MDT AutoSaveaffected 7.00 before 7.04
MDT Software / AutoSave for System Platform (A4SP)affected unspecified before 4.01
MDT Software / A4SPaffected 5.00

CWE

CWE-77

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.