PT-2022-10158

Name of the Vulnerable Software and Affected Versions MDT AutoSave versions prior to v6.02.06 Description An attacker could utilize a function in MDT AutoSave that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a...

CVE-2021-32953: Improper Neutralization of Special Elements used in an SQL Command

An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login...

MDT AutoSave 加密问题漏洞

MDT AutoSave is a software application. It provides an automated change management function. MDT AutoSave is vulnerable to an encryption issue that could allow an attacker to break the encryption and gain access to the system...

MDT AutoSave 操作系统操作系统命令注入漏洞

MDT AutoSave is a software application. It provides an automated change management function. An operating system command injection vulnerability exists in MDT AutoSave, which stems from the application's API not validating data data effectively, allowing an attacker to execute system commands by...

MDT AutoSave SQL注入漏洞

MDT AutoSave is a software application. It provides an automated change management function. MDT AutoSave suffers from a SQL injection vulnerability that originates from an attacker being able to utilize SQL commands to create a new user on the system and update the user's privileges, granting th...

MDT AutoSave SQL注入漏洞

MDT AutoSave is a software application. It provides an automated change management function. An SQL injection vulnerability exists in MDT AutoSave where a function in the device is used to retrieve process-specific system information, which is collected by executing multiple commands and...

MDT AutoSave

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: MDT Software Equipment: MDT AutoSave Vulnerabilities: Inadequate Encryption Strength, SQL Injection, Relative Path Traversal, Command Injection, Uncontrolled Search Path Element, Generation of Error...