CVE-2020-29493

CVE-2020-29493 is a critical SQL Injection vulnerability affecting DELL EMC Avamar Server versions 19.1, 19.2, and 19.3, as well as Dell EMC Integrated Data Protection Appliance. An unauthenticated remote attacker can exploit this flaw in the Fitness Analyzer to execute arbitrary SQL commands, gaining unauthorized read and write access to sensitive application data, potentially leading to data leakage or deletion. With a CVSS score of 9.8 (Critical), this vulnerability is easily exploitable over the network with low complexity and no user interaction required, posing a significant risk to data confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, Dell EMC strongly recommends immediate upgrades to mitigate this severe threat.