CVE-2025-9588: OS Command Injection in Iron Mountain's enVision
Published Sep 23, 2025
·Updated
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection.
This issue affects enVision: before 250563.
Affected Software
3 affected components
Iron Mountain enVision<250563
All of the following
Ironmountain Envision<250563
Linux Linux kernel
Event History
Sep 23, 2025
CVE Published
via MITRE·07:51 AM
Data Sourced
via MITRE·07:51 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Feb 27, 57989
Event
via FIRST·09:51 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-9588?
CVE-2025-9588 is classified as a critical vulnerability due to its potential for OS command injection.
2
How do I fix CVE-2025-9588?
To fix CVE-2025-9588, update Iron Mountain enVision to version 250563 or later.
3
What systems are affected by CVE-2025-9588?
CVE-2025-9588 affects Iron Mountain enVision versions prior to 250563.
4
Can CVE-2025-9588 be exploited remotely?
Yes, CVE-2025-9588 can be exploited remotely, allowing attackers to execute arbitrary commands.
5
What should I do if I cannot immediately update for CVE-2025-9588?
If an immediate update is not possible, implement network segmentation and restrict access to affected services to mitigate potential exploitation of CVE-2025-9588.