Unscored severity · published Dec 5, 2011
CVE-2011-2397
The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the…
–
CVSS
5.3%
EPSS
No
On KEV
Description
The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.3% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CB
Connected Backup · Ironmountain
8.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2397
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2397
osvdb.org
http://osvdb.org/77495
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-11-339/
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/71602