CVE-2021-32953
01.04.2022, 23:15
An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| auvesy-mdt | autosave | 𝑥 < 6.02.06 |
| auvesy-mdt | autosave | 7.00 ≤ 𝑥 ≤ 7.04 |
| auvesy-mdt | autosave_for_system_platform | 𝑥 < 4.01 |
| auvesy-mdt | autosave_for_system_platform | 5.00 |
𝑥
= Vulnerable software versions