VulnerabilityModified
CVE-2021-29644
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow.
CRITICAL 9.8EPSS 2.54%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this issue to execute code with unrestricted privileges on the underlying OS.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.54% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- hitachi/it operations director · hitachi/job management partner 1\/it desktop management-manager · hitachi/job management partner 1\/it desktop management 2-manager · hitachi/job management partner 1\/remote control agent · hitachi/job management partner 1\/software distribution client · hitachi/job management partner 1\/software distribution manager · hitachi/jp1\/it desktop management-manager · hitachi/jp1\/it desktop management 2-manager · hitachi/jp1\/it desktop management 2-operations director · hitachi/jp1\/netdm\/dm client · hitachi/jp1\/netdm\/dm client-remote control feature · hitachi/jp1\/netdm\/dm manager · hitachi/jp1\/netm\/remote control agent · hitachi/jp1\/remote control agent
- Source
- cve@mitre.org
References
- https://www.hitachi.com/hirt/security/index.htmlVendor Advisory
- https://www.hitachi.com/hirt/security/index.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.