Lucene search

K
kasperskyKaspersky LabKLA10126
HistoryDec 05, 2011 - 12:00 a.m.

KLA10126 ACE vulnerability in Connected Backup

2011-12-0500:00:00
Kaspersky Lab
threats.kaspersky.com
10

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.828 High

EPSS

Percentile

98.4%

An unspecified vulnerability was found in Connected Backup. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed request.

Original advisories

Related products

Connected-Backup

CVE list

CVE-2011-2397 critical

Solution

Update to latest version

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

  • Iron Mountain Connected Backup version 8.4

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.828 High

EPSS

Percentile

98.4%