PT-2021-12395 · Dell Emc · Dell Emc Avamar Server+1

Published 2021-07-28 · Updated 2021-08-05 · CVE-2020-5341

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1, 19.2 Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.4.1

Description A Deserialization of Untrusted Data issue allows a remote unauthenticated attacker to send a serialized payload that would execute code on the system.

Recommendations For Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1, 19.2, update to a version that contains a fix for this issue. For Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.4.1, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2020-5341

Affected Products

Dell Emc Avamar Server

Dell Emc Integrated Data Protection Appliance

References · 5

• https://osv.dev/vulnerability/CVE-2020-5341 · Vendor Advisory
• https://dell.com/support/security/en-us/details/541677/DSA-2020-057-Dell-EMC-Avamar-Server-Deserialization-of-Untrusted-Data-Vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5341 · Security Note
• https://t.me/cvenotify/18730 · Telegram Post
• https://t.me/cvenotify/18217 · Telegram Post