CVE-2011-2397 The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to s...
HighCVSS 10.0
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ironmountain connected backup | = 8.4 | No fix listed |
References
- 77495 vdb-entry
- www.zerodayinitiative.com
- iron-mountain-connected-command-exec(71602) vdb-entry