title: MDT AutoSave Unrestricted Upload of File with Dangerous Type
description: A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks for and get execution capabilities.
problem types: CWE-434: Unrestricted Upload of File with Dangerous Type
affected:
{
product: MDT AutoSave
vendor: MDT Software
versions:
lessThan: 6.02.06, status: affected, version: unspecified, versionType: custom
}
{
product: MDT AutoSave
vendor: MDT Software
versions:
lessThan: 7.04, status: affected, version: 7.00, versionType: custom
}
{
product: AutoSave for System Platform (A4SP)
vendor: MDT Software
versions:
lessThan: 4.01, status: affected, version: unspecified, versionType: custom
}
{
product: A4SP
vendor: MDT Software
versions:
status: affected, version: 5.00
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
version: 3.1
]
solutions: Updated versions of MDT AutoSave and AutoSave for System Platform (A4SP) were developed to address these vulnerabilities as follows:
MDT AutoSave 6.x version: Version 6.02.06 (Released January 2021)
MDT AutoSave 7.x version: Version 7.05 (Released December 2020)
A4SP 4.x version: Version 4.01 (Released June 2021)
A4SP 5.x version: Version 5.01 (Released May 2021)
For more information about these vulnerabilities, and to obtain and install the new versions, please contact MDT Software customer support.