Unscored severity · published Jul 31, 2013
CVE-2013-4697
Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through 10-01-02; Hitachi Job Management Partner 1/IT Desktop Management - Manager 09-50 through 09-50-03 and 10-01; and Hitachi IT Operations Director 02-50 through 02-50-07, 03-00 through 03-00-12, and 04-00 through 04-00-01 allow remote authenticated users to gain privileges via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IO
IT Operations Director · Hitachi
02-50; 02-50-01; 02-50-06; 02-50-07; 03-00; 03-00-04; +5 more · source: NVD
JM
Job Management Partner 1/it Desktop Management-manager · Hitachi
09-50; 09-50-03; 10-01 · source: NVD
JD
Jp1/it Desktop Management-manager · Hitachi
09-51; 09-51-05; 10-00; 10-00-02; 10-01; 10-01-02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4697
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4697
jvn.jp
http://jvn.jp/en/jp/JVN00065218/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000076
Vendor Advisory
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-017/index.html
More from IT Operations Director
9.8
CVE-2021-29644
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow
7.8
CVE-2021-29645
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation…
–
CVE-2012-4276
Unspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows attackers to cause a denial of service via unknown attack…
–
CVE-2012-4275
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows remote attackers to inject arbitrary web script…
–
CVE-2012-0919
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows…