CVEvulnerability

CVE-2020-5341

9.8 CRITICAL Published 2021-07-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-502

Description

Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated attacker could exploit this vulnerability to send a serialized payload that would execute code on the system.

Affected configurations

• dell emc avamar server 7.4.1 • dell emc avamar server 7.5.0 • dell emc avamar server 7.5.1 • dell emc avamar server 18.1 • dell emc avamar server 18.2 • dell emc avamar server 19.1 • dell emc avamar server 19.2 • dell emc integrated data protection appliance firmware 2.0 • dell emc integrated data protection appliance firmware 2.1 • dell emc integrated data protection appliance firmware 2.2 • dell emc integrated data protection appliance firmware 2.3 • dell emc integrated data protection appliance firmware 2.4 • dell emc integrated data protection appliance firmware 2.4.1

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References