CVE-2021-32949 MDT AutoSave Relative Path Traversal

An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file...

CVE-2021-32949 MDT AutoSave Relative Path Traversal

An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file...

CVE-2021-32949

CVE-2021-32949 describes a relative path traversal in MDT AutoSave prior to version 6.02.06, where a function could change a designated path to another path and traverse directories, allowing replacement of an existing file with a malicious file. Affected products/versions include MDT AutoSave be...

CVE-2021-32957 MDT AutoSave Uncontrolled Search Path Element

A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is...

CVE-2021-32957 MDT AutoSave Uncontrolled Search Path Element

A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is...

CVE-2021-32957

The CVE-2021-32957 entry relates to MDT AutoSave prior to version 6.02.06, where a function used to retrieve process system information collects commands and formats results into XML and returns the full path to the executable. This creates a risk of binary hijacking (Uncontrolled Search Path Ele...

CVE-2021-32937

MDT AutoSave vulnerability CVE-2021-32937 affects MDT AutoSave prior to 6.02.06 (and related A4SP versions). The issue is listed as Generation of Error Message Containing Sensitive Information, enabling an attacker to learn about a session temporary working folder via getfile/putfile commands and...

CVE-2021-32933

MDT AutoSave (MDT Software) prior to v6.02.06 is affected by a command-injection vulnerability in the API that fails to validate input, enabling an attacker to pass a malicious file and manipulate the process creation command line to execute a malicious process. The issue is documented across mul...

CVE-2021-32933 MDT AutoSave Command Injection

An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious process...

CVE-2021-32933 MDT AutoSave Command Injection

An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious process...

CVE-2021-32953

MDT AutoSave is affected by CVE-2021-32953 (SQL Injection). The vulnerability allows an attacker to execute SQL commands to create a new user and update permissions, enabling login. Affected: MDT AutoSave versions prior to 6.02.06 (and related AutoSave for System Platform entries in the family). ...

CVE-2021-32953 MDT AutoSave SQL Injection

An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login...

CVE-2021-32953 MDT AutoSave SQL Injection

An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login...

CVE-2021-32961

MDT AutoSave (before v6.02.06) contains a vulnerability in the getfile function that lets an attacker supply an optional parameter to trigger special request handling, enabling an unzip operation and placement of a malicious .exe in searched locations, yielding execution capabilities. Affected pr...

CVE-2021-32961 MDT AutoSave Unrestricted Upload of File with Dangerous Type

A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function loo...

CVE-2021-32961 MDT AutoSave Unrestricted Upload of File with Dangerous Type

A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function loo...

Exploit for CVE-2021-37740

Proof of Concept for CVE-2021-37740 Table of Contents -...

AutomatedLab - A Provisioning Solution And Framework That Lets You Deploy Complex Labs On HyperV And Azure With Simple PowerShell Scripts

AutomatedLab AL enables you to setup test and lab environments on Hyper-v or Azure with multiple products or just a single VM in a very short time. There are only two requirements you need to make sure: You need the DVD ISO images and a Hyper-V host or an Azure subscription. Requirements Apart fr...

MDT AutoSave

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: MDT Software Equipment: MDT AutoSave Vulnerabilities: Inadequate Encryption Strength, SQL Injection, Relative Path Traversal, Command Injection, Uncontrolled Search Path Element, Generation of Error...

MDT AutoSave SQL注入漏洞

MDT AutoSave is a software application. It provides an automated change management function. An SQL injection vulnerability exists in MDT AutoSave where a function in the device is used to retrieve process-specific system information, which is collected by executing multiple commands and...