CVE-2021-32953: Auvesy-Mdt Autosave

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login.

Affected products

• Auvesy-Mdt Autosave: before 6.02.06 (fixed in 6.02.06); from 7.00, up to and including 7.04
• Auvesy-Mdt Autosave For System Platform: before 4.01 (fixed in 4.01); version 5.00 only

Published 2022-04-01. Last modified 2026-06-17.