Iron Mountain EnVision CVE-2025-9588

The description states OS command injection with no feature toggle or configuration precondition named, and the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates remote unauthenticated exploitation against reachable installations. The practical limiting factor is network exposure: an attacker must be able to reach a vulnerable enVision interface/endpoint, so installations behind segmentation, VPN, or not internet-facing are materially harder to reach. Exploitation is bounded to deployments running enVision versions before build 250563; patched builds are not affected. No user interaction or authentication is required per the vector.

The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) describes a maximally severe, network-reachable, unauthenticated OS command injection with full confidentiality, integrity, and availability impact - a textbook critical finding. However, the real-world signals temper this: the EPSS score is only 0.32% (55th percentile), indicating low modeled probability of exploitation in the near term, and there is no CISA KEV listing and no identified public exploit code. There is therefore a divergence between the theoretical severity (very high) and the observed/predicted exploitation activity (low), which is common for newly disclosed flaws in lower-footprint enterprise products that have not yet attracted public exploit development. Reporting originates from Turkey's national CSIRT (USOM/TR-CERT) and a VulDB advisory, which lends credibility to the disclosure but does not independently confirm exploitation. Net assessment: this is a genuinely dangerous flaw that warrants prompt patching wherever Iron Mountain enVision is deployed, but absent KEV/POC/high-EPSS it is a patch-promptly priority rather than an emergency drop-everything item for most organizations. No CVSS-vs-description conflict was observed; the AV:N/PR:N vector is consistent with the OS command injection description.

A remote, unauthenticated attacker sends a crafted request to an exposed Iron Mountain enVision interface, injecting shell metacharacters into an input that is passed unsanitized to an OS command. The injected command executes with the privileges of the enVision service, giving the attacker arbitrary command execution on the host. No public proof-of-concept exploit has been identified at time of analysis, and the low attack complexity (AC:L) means no special timing or environmental conditions are needed once a vulnerable endpoint is reachable.