CVE-2021-32961: Auvesy-Mdt Autosave

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks for and get execution capabilities.

Affected products

• Auvesy-Mdt Autosave: before 6.02.06 (fixed in 6.02.06); from 7.00, up to and including 7.04
• Auvesy-Mdt Autosave For System Platform: before 4.01 (fixed in 4.01); version 5.00 only

Published 2022-04-01. Last modified 2026-06-17.