CVE-2021-32949: Auvesy-Mdt Autosave

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file.

Affected products

• Auvesy-Mdt Autosave: before 6.02.06 (fixed in 6.02.06); from 7.00, up to and including 7.04
• Auvesy-Mdt Autosave For System Platform: before 4.01 (fixed in 4.01); version 5.00 only

Published 2022-04-01. Last modified 2026-06-17.