CVE-2021-29644

published 2021-10-12

CVE-2021-29644: Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network…

Priority P2 66 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this issue to execute code with unrestricted privileges on the underlying OS.

Affected

105 ranges · showing 25

Vendor	Product	Version range	Fixed in
hitachi	it_operations_director	02-50 – 02-50-07	—
hitachi	it_operations_director	03-00 – 03-00-12	—
hitachi	it_operations_director	04-00 – 04-00-17	—
hitachi	it_operations_director	04-50 – 04-50-16	—
hitachi	job_management_partner_1_it_desktop_management-manager	09-50 – 09-50-03	—
hitachi	job_management_partner_1_it_desktop_management-manager	10-01 – 10-01-06	—
hitachi	job_management_partner_1_it_desktop_management-manager	10-10 – 10-10-16	—
hitachi	job_management_partner_1_it_desktop_management_2-manager	10-50 – 10-50-11	—
hitachi	job_management_partner_1_remote_control_agent	08-00 – 08-00-04	—
hitachi	job_management_partner_1_remote_control_agent	08-10 – 08-10-05	—
hitachi	job_management_partner_1_remote_control_agent	08-51 – 08-51-18	—
hitachi	job_management_partner_1_remote_control_agent	09-00 – 09-00-07	—
hitachi	job_management_partner_1_remote_control_agent	09-50 – 09-50-09	—
hitachi	job_management_partner_1_remote_control_agent	09-51 – 09-51-15	—
hitachi	job_management_partner_1_software_distribution_client	08-00 – 08-00-05	—
hitachi	job_management_partner_1_software_distribution_client	08-10 – 08-10-06	—
hitachi	job_management_partner_1_software_distribution_client	08-51 – 08-51-19	—
hitachi	job_management_partner_1_software_distribution_client	09-00 – 09-00-09	—
hitachi	job_management_partner_1_software_distribution_client	09-50 – 09-50-09	—
hitachi	job_management_partner_1_software_distribution_client	09-51 – 09-51-13	—
hitachi	job_management_partner_1_software_distribution_manager	08-00 – 08-00-07	—
hitachi	job_management_partner_1_software_distribution_manager	08-10 – 08-10-06	—
hitachi	job_management_partner_1_software_distribution_manager	08-51 – 08-51-19	—
hitachi	job_management_partner_1_software_distribution_manager	09-00 – 09-00-09	—
hitachi	job_management_partner_1_software_distribution_manager	09-50 – 09-50-09	—

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-190