CVE-2011-2397
NONE
Published Dec 5, 201114y ago · Modified Jun 16, 20262w ago
Published Dec 5, 2011 14y ago
Last Modified Jun 16, 2026 2w ago
Description
The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-20 Improper Input Validation Validation
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| ironmountain | connected_backup | 8.4 | any |
References 3
- osvdb.org http://osvdb.org/77495
- zerodayinitiative.com http://www.zerodayinitiative.com/advisories/ZDI-11-339/
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/71602
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.