What’s Vulnerable › Vulnerabilities

CVE-2020-5341

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-07-28 · updated 2026-06-17
• Weakness: CWE-502

Description

Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated attacker could exploit this vulnerability to send a serialized payload that would execute code on the system.

Affected products

• Dell Emc Avamar Server: 7.4.1, 7.5.0, 7.5.1, 18.1, 18.2, 19.1 (+1)
• Dell Integrated Data Protection Appliance: 2.0, 2.1, 2.2, 2.3, 2.4, 2.4.1

References

• https://www.dell.com/support/security/en-us/details/541677/DSA-2020-057-Dell-EMC-Avamar-Server-Deserialization-of-Untrusted-Data-Vulnerability
• https://www.dell.com/support/security/en-us/details/541677/DSA-2020-057-Dell-EMC-Avamar-Server-Deserialization-of-Untrusted-Data-Vulnerability

Get alerted when CVE-2020-5341 or the next vulnerability affects your stack