CVE-2021-32937: Auvesy-Mdt Autosave

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave versions prior to v6.02.06. An attacker can leverage this knowledge to provide a malicious command to the working directory where the read and write activity can be initiated.

Affected products

• Auvesy-Mdt Autosave: before 6.02.06 (fixed in 6.02.06); from 7.00, up to and including 7.04
• Auvesy-Mdt Autosave For System Platform: before 4.01 (fixed in 4.01); version 5.00 only

Published 2022-04-01. Last modified 2026-06-17.