CVE-2021-32949— MDT AutoSave Relative Path Traversal
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-32949
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MDT AutoSave Relative Path Traversal
Source: NVD (National Vulnerability Database)
Vulnerability Description
An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
相对路径遍历
Source: NVD (National Vulnerability Database)
Vulnerability Title
MDT AutoSave 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MDT AutoSave是一个应用软件。提供一个自动化变更管理功能。 MDT Autosave存在路径遍历漏洞。攻击者利用该漏洞，允许改变被指定路径到另一条路径，使带有恶意文件替换现有文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MDT Software | MDT AutoSave | unspecified ~ 6.02.06 | - | |
| MDT Software | MDT AutoSave | 7.00 ~ 7.04 | - | |
| MDT Software | AutoSave for System Platform (A4SP) | unspecified ~ 4.01 | - | |
| MDT Software | A4SP | 5.00 | - |
II. Public POCs for CVE-2021-32949
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-32949
请登录查看更多情报信息。
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2021-32949
Same Patch Batch · MDT Software · 2022-04-01 · 7 CVEs total
| CVE-2021-32933 | 10.0 CRITICAL | MDT AutoSave Command Injection |
| CVE-2021-32953 | 9.8 CRITICAL | MDT AutoSave SQL Injection |
| CVE-2021-32937 | 7.5 HIGH | MDT AutoSave Generation of Error Message Containing Sensitive Information |
| CVE-2021-32945 | 7.5 HIGH | MDT AutoSave Inadequate Encryption Strength |
| CVE-2021-32957 | 7.5 HIGH | MDT AutoSave Uncontrolled Search Path Element |
| CVE-2021-32961 | 7.5 HIGH | MDT AutoSave Unrestricted Upload of File with Dangerous Type |
IV. Related Vulnerabilities
Same product: MDT AutoSave
Same weakness: CWE-23
- CVE-2026-8209
Gibbon<30.0.01路径遍历漏洞导致拒绝服务 - CVE-2026-43533
OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot M - CVE-2026-43616
Detect-It-Easy < 3.21 Path Traversal Arbitrary File Write - CVE-2026-42085
OpenC3 COSMOS: Arbitrary write to plugins directory via path - CVE-2026-22070
ColorOS Assistant Path Traversal Vulnerability
V. Comments for CVE-2021-32949
No comments yet