ZeroHour

CVE-2021-32949

CVSS 3.1
7.5 high
EPSS
1%p64
Published
()
Modified
Description

An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file.

Vendors
auvesy-mdt
Products
autosave, autosave for system platform
Weakness
CWE-23, CWE-22
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

In the news

No ingested article mentions this CVE yet.