High severity · published Oct 12, 2021
CVE-2021-29645
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IO
IT Operations Director · Hitachi
02-50 through 02-50-07; 03-00 through 03-00-12; 04-00 through 04-00-17; 04-50 through 04-50-16 · source: NVD
JM
Job Management Partner 1/it Desktop Management 2-manager · Hitachi
10-50 through 10-50-11 · source: NVD
JM
Job Management Partner 1/it Desktop Management-manager · Hitachi
09-50 through 09-50-03; 10-01 through 10-01-06; 10-10 through 10-10-16 · source: NVD
JM
Job Management Partner 1/remote Control Agent · Hitachi
08-00 through 08-00-04; 08-10 through 08-10-05; 08-51 through 08-51-18; 09-00 through 09-00-07; 09-50 through 09-50-09; 09-51 through 09-51-15 · source: NVD
JM
Job Management Partner 1/software Distribution Client · Hitachi
08-00 through 08-00-05; 08-10 through 08-10-06; 08-51 through 08-51-19; 09-00 through 09-00-09; 09-50 through 09-50-09; 09-51 through 09-51-13 · source: NVD
JM
Job Management Partner 1/software Distribution Manager · Hitachi
08-00 through 08-00-07; 08-10 through 08-10-06; 08-51 through 08-51-19; 09-00 through 09-00-09; 09-50 through 09-50-09; 09-51 through 09-51-13 · source: NVD
JD
Jp1/it Desktop Management 2-manager · Hitachi
10-50 through 10-50-12; 11-00 through 11-00-11; 11-01 through 11-01-12; 11-10 through 11-10-10; 11-50 through 11-50-08; 11-51 through 11-51-10; +3 more · source: NVD
JD
Jp1/it Desktop Management 2-operations Director · Hitachi
11-01 through 11-01-12; 11-10 through 11-10-10; 11-50 through 11-50-08; 11-51 through 11-51-10; 12-00 through 12-00-09; 12-10 through 12-10-07; +1 more · source: NVD
JD
Jp1/it Desktop Management-manager · Hitachi
09-50 through 09-50-03; 09-51 through 09-51-05; 10-00 through 10-00-02; 10-01 through 10-01-05; 10-02 through 10-02-05; 10-10 through 10-10-16 · source: NVD
JC
Jp1/netm/dm Client · Hitachi
08-00 through 08-00-09; 08-01 through 08-01-04; 08-02 through 08-02-07; 08-10 through 08-10-13; 08-11 through 08-11-17; 08-12 through 08-12-03; +10 more · source: NVD
JC
Jp1/netm/dm Client-remote Control Feature · Hitachi
08-00 through 08-00-06; 08-01 through 08-01-03; 08-02 through 08-02-04; 08-10 through 08-10-10; 08-11 through 08-11-06; 08-50 through 08-50-04; +7 more · source: NVD
JM
Jp1/netm/dm Manager · Hitachi
08-00 through 08-00-09; 08-02 through 08-02-07; 08-10 through 08-10-13; 08-11 through 08-11-17; 08-50 through 08-50-08; 08-51 through 08-51-18; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-29645
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-29645
Vendor Advisory
https://www.hitachi.com/hirt/security/index.html
More from IT Operations Director
9.8
CVE-2021-29644
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow
–
CVE-2013-4697
Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through…
–
CVE-2012-4276
Unspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows attackers to cause a denial of service via unknown attack…
–
CVE-2012-4275
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows remote attackers to inject arbitrary web script…
–
CVE-2012-0919
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows…