CVE-2021-32949

EUVD-2021-19670 · Published Apr 1, 2022

An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file.

Technologies

Auvesy-Mdt Autosave For System PlatformAuvesy-Mdt Autosave

Weaknesses

CWE-22CWE-23

CVSS scores

v3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
v2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02

Potentially impacted assets

See if this affects your attack surface