IcscertCVELIST:CVE-2021-32937CVE-2021-32937 MDT AutoSave Generation of Error Message Containing Sensitive Information
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
50.6%
An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave versions prior to v6.02.06. An attacker can leverage this knowledge to provide a malicious command to the working directory where the read and write activity can be initiated.
CNA Affected
[
{
"product": "MDT AutoSave",
"vendor": "MDT Software",
"versions": [
{
"lessThan": "6.02.06",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "MDT AutoSave",
"vendor": "MDT Software",
"versions": [
{
"lessThan": "7.04",
"status": "affected",
"version": "7.00",
"versionType": "custom"
}
]
},
{
"product": "AutoSave for System Platform (A4SP)",
"vendor": "MDT Software",
"versions": [
{
"lessThan": "4.01",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "A4SP",
"vendor": "MDT Software",
"versions": [
{
"status": "affected",
"version": "5.00"
}
]
}
]Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
50.6%