CVE-2021-32933: Auvesy-Mdt Autosave

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious process.

Affected products

• Auvesy-Mdt Autosave: before 6.02.06 (fixed in 6.02.06); from 7.00, up to and including 7.04
• Auvesy-Mdt Autosave For System Platform: before 4.01 (fixed in 4.01); version 5.00 only

Published 2022-04-01. Last modified 2026-06-17.