Critical severity · published Oct 12, 2021
CVE-2021-29644
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow
9.8
CVSS
2.5%
EPSS
No
On KEV
Description
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this issue to execute code with unrestricted privileges on the underlying OS.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IO
IT Operations Director · Hitachi
02-50 through 02-50-07; 03-00 through 03-00-12; 04-00 through 04-00-17; 04-50 through 04-50-16 · source: NVD
JM
Job Management Partner 1/it Desktop Management 2-manager · Hitachi
10-50 through 10-50-11 · source: NVD
JM
Job Management Partner 1/it Desktop Management-manager · Hitachi
09-50 through 09-50-03; 10-01 through 10-01-06; 10-10 through 10-10-16 · source: NVD
JM
Job Management Partner 1/remote Control Agent · Hitachi
08-00 through 08-00-04; 08-10 through 08-10-05; 08-51 through 08-51-18; 09-00 through 09-00-07; 09-50 through 09-50-09; 09-51 through 09-51-15 · source: NVD
JM
Job Management Partner 1/software Distribution Client · Hitachi
08-00 through 08-00-05; 08-10 through 08-10-06; 08-51 through 08-51-19; 09-00 through 09-00-09; 09-50 through 09-50-09; 09-51 through 09-51-13 · source: NVD
JM
Job Management Partner 1/software Distribution Manager · Hitachi
08-00 through 08-00-07; 08-10 through 08-10-06; 08-51 through 08-51-19; 09-00 through 09-00-09; 09-50 through 09-50-09; 09-51 through 09-51-13 · source: NVD
JD
Jp1/it Desktop Management 2-manager · Hitachi
10-50 through 10-50-12; 11-00 through 11-00-11; 11-01 through 11-01-12; 11-10 through 11-10-10; 11-50 through 11-50-08; 11-51 through 11-51-10; +3 more · source: NVD
JD
Jp1/it Desktop Management 2-operations Director · Hitachi
11-01 through 11-01-12; 11-10 through 11-10-10; 11-50 through 11-50-08; 11-51 through 11-51-10; 12-00 through 12-00-09; 12-10 through 12-10-07; +1 more · source: NVD
JD
Jp1/it Desktop Management-manager · Hitachi
09-50 through 09-50-03; 09-51 through 09-51-05; 10-00 through 10-00-02; 10-01 through 10-01-05; 10-02 through 10-02-05; 10-10 through 10-10-16 · source: NVD
JC
Jp1/netdm/dm Client · Hitachi
08-00 through 08-00-09; 08-01 through 08-01-04; 08-02 through 08-02-07; 08-10 through 08-10-13; 08-11 through 08-11-17; 08-12 through 08-12-03; +10 more · source: NVD
JC
Jp1/netdm/dm Client-remote Control Feature · Hitachi
08-00 through 08-00-06; 08-01 through 08-01-03; 08-02 through 08-02-04; 08-10 through 08-10-10; 08-11 through 08-11-06; 08-50 through 08-50-04; +7 more · source: NVD
JM
Jp1/netdm/dm Manager · Hitachi
08-00 through 08-00-09; 08-02 through 08-02-07; 08-10 through 08-10-13; 08-11 through 08-11-17; 08-50 through 08-50-08; 08-51 through 08-51-18; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-29644
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-29644
Vendor Advisory
https://www.hitachi.com/hirt/security/index.html
More from IT Operations Director
7.8
CVE-2021-29645
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation…
–
CVE-2013-4697
Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through…
–
CVE-2012-4276
Unspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows attackers to cause a denial of service via unknown attack…
–
CVE-2012-4275
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows remote attackers to inject arbitrary web script…
–
CVE-2012-0919
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows…