Security Advisory

CVE-2021-32961

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-01 22:17:04

Last updated 2025-04-16 16:34:53

Assigner icscert

State PUBLISHED

Description

A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks for and get execution capabilities.

← Browse all CVEs View on cve.org ↗