CVE-2020-5341: dell avamar virtual edition Deserialization of Untrusted Data
Vulnerability summary
CVE-2020-5341 is a high (CVSS 10.0) Deserialization of Untrusted Data vulnerability in dell avamar virtual edition. EPSS estimates a 4.25% chance of exploitation in the next 30 days, higher than 90.9% of scored vulnerabilities.
Timeline
- 28-07-2021PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated attacker could exploit this vulnerability to send a serialized payload that would execute code on the system.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
4.25%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.25% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Dell3 products
- avamar virtual edition≥ unspecified, < Avamar 7.5 Virtual Edition for VMware vSphere only
- emc_avamar_server7.4.1 | 7.5.0 | 7.5.1 | 18.1 | 18.2 | 19.1 | 19.2
- emc_integrated_data_protection_appliance_firmware2.0 | 2.1 | 2.2 | 2.3 | 2.4 | 2.4.1
1 vendor · 3 products