Vulnerability Details CVE-2011-2397
The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.047
EPSS Ranking 88.9%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-2011-2397
-
cpe:2.3:a:ironmountain:connected_backup:8.4