CVE-2021-29644: Hitachi It Operations Director

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this issue to execute code with unrestricted privileges on the underlying OS.

Affected products

  • Hitachi It Operations Director: from 02-50, up to and including 02-50-07; from 03-00, up to and including 03-00-12; from 04-00, up to and including 04-00-17; from 04-50, up to and including 04-50-16
  • Hitachi Job Management Partner 1/it Desktop Management-Manager: from 09-50, up to and including 09-50-03; from 10-01, up to and including 10-01-06; from 10-10, up to and including 10-10-16
  • Hitachi Job Management Partner 1/it Desktop Management 2-Manager: from 10-50, up to and including 10-50-11
  • Hitachi Job Management Partner 1/remote Control Agent: from 08-00, up to and including 08-00-04; from 08-10, up to and including 08-10-05; from 08-51, up to and including 08-51-18; from 09-00, up to and including 09-00-07; from 09-50, up to and including 09-50-09; from 09-51, up to and including 09-51-15
  • Hitachi Job Management Partner 1/software Distribution Client: from 08-00, up to and including 08-00-05; from 08-10, up to and including 08-10-06; from 08-51, up to and including 08-51-19; from 09-00, up to and including 09-00-09; from 09-50, up to and including 09-50-09; from 09-51, up to and including 09-51-13
  • Hitachi Job Management Partner 1/software Distribution Manager: from 08-00, up to and including 08-00-07; from 08-10, up to and including 08-10-06; from 08-51, up to and including 08-51-19; from 09-00, up to and including 09-00-09; from 09-50, up to and including 09-50-09; from 09-51, up to and including 09-51-13
  • Hitachi JP1/IT Desktop Management-Manager: from 09-50, up to and including 09-50-03; from 09-51, up to and including 09-51-05; from 10-00, up to and including 10-00-02; from 10-01, up to and including 10-01-05; from 10-02, up to and including 10-02-05; from 10-10, up to and including 10-10-16
  • Hitachi JP1/IT Desktop Management 2-Manager: from 10-50, up to and including 10-50-12; from 11-00, up to and including 11-00-11; from 11-01, up to and including 11-01-12; from 11-10, up to and including 11-10-10; from 11-50, up to and including 11-50-08; from 11-51, up to and including 11-51-10; …
  • Hitachi JP1/IT Desktop Management 2-Operations Director: from 11-01, up to and including 11-01-12; from 11-10, up to and including 11-10-10; from 11-50, up to and including 11-50-08; from 11-51, up to and including 11-51-10; from 12-00, up to and including 12-00-09; from 12-10, up to and including 12-10-07; …
  • Hitachi JP1/NETDM/DM Client: from 08-00, up to and including 08-00-09; from 08-01, up to and including 08-01-04; from 08-02, up to and including 08-02-07; from 08-10, up to and including 08-10-13; from 08-11, up to and including 08-11-17; from 08-12, up to and including 08-12-03; …
  • Hitachi JP1/NETDM/DM Client-Remote Control Feature: from 08-00, up to and including 08-00-06; from 08-01, up to and including 08-01-03; from 08-02, up to and including 08-02-04; from 08-10, up to and including 08-10-10; from 08-11, up to and including 08-11-06; from 08-50, up to and including 08-50-04; …
  • Hitachi JP1/NETDM/DM Manager: from 08-00, up to and including 08-00-09; from 08-02, up to and including 08-02-07; from 08-10, up to and including 08-10-13; from 08-11, up to and including 08-11-17; from 08-50, up to and including 08-50-08; from 08-51, up to and including 08-51-18; …
  • Hitachi JP1/NETM/REMOTE Control Agent: from 08-00, up to and including 08-00-06; from 08-01, up to and including 08-01-03; from 08-02, up to and including 08-02-04; from 08-10, up to and including 08-10-10; from 08-11, up to and including 08-11-06; from 08-50, up to and including 08-50-04; …
  • Hitachi JP1/REMOTE Control Agent: from 11-00, up to and including 11-00-02; from 12-00, up to and including 12-00-01

Published 2021-10-12. Last modified 2026-06-17.