CVE-2021-29645: Hitachi It Operations Director

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.

Affected products

Hitachi It Operations Director: from 02-50, up to and including 02-50-07; from 03-00, up to and including 03-00-12; from 04-00, up to and including 04-00-17; from 04-50, up to and including 04-50-16
Hitachi Job Management Partner 1/it Desktop Management-Manager: from 09-50, up to and including 09-50-03; from 10-01, up to and including 10-01-06; from 10-10, up to and including 10-10-16
Hitachi Job Management Partner 1/it Desktop Management 2-Manager: from 10-50, up to and including 10-50-11
Hitachi Job Management Partner 1/remote Control Agent: from 08-00, up to and including 08-00-04; from 08-10, up to and including 08-10-05; from 08-51, up to and including 08-51-18; from 09-00, up to and including 09-00-07; from 09-50, up to and including 09-50-09; from 09-51, up to and including 09-51-15
Hitachi Job Management Partner 1/software Distribution Client: from 08-00, up to and including 08-00-05; from 08-10, up to and including 08-10-06; from 08-51, up to and including 08-51-19; from 09-00, up to and including 09-00-09; from 09-50, up to and including 09-50-09; from 09-51, up to and including 09-51-13
Hitachi Job Management Partner 1/software Distribution Manager: from 08-00, up to and including 08-00-07; from 08-10, up to and including 08-10-06; from 08-51, up to and including 08-51-19; from 09-00, up to and including 09-00-09; from 09-50, up to and including 09-50-09; from 09-51, up to and including 09-51-13
Hitachi JP1/IT Desktop Management-Manager: from 09-50, up to and including 09-50-03; from 09-51, up to and including 09-51-05; from 10-00, up to and including 10-00-02; from 10-01, up to and including 10-01-05; from 10-02, up to and including 10-02-05; from 10-10, up to and including 10-10-16
Hitachi JP1/IT Desktop Management 2-Manager: from 10-50, up to and including 10-50-12; from 11-00, up to and including 11-00-11; from 11-01, up to and including 11-01-12; from 11-10, up to and including 11-10-10; from 11-50, up to and including 11-50-08; from 11-51, up to and including 11-51-10; …
Hitachi JP1/IT Desktop Management 2-Operations Director: from 11-01, up to and including 11-01-12; from 11-10, up to and including 11-10-10; from 11-50, up to and including 11-50-08; from 11-51, up to and including 11-51-10; from 12-00, up to and including 12-00-09; from 12-10, up to and including 12-10-07; …
Hitachi JP1/NETM/DM Client: from 08-00, up to and including 08-00-09; from 08-01, up to and including 08-01-04; from 08-02, up to and including 08-02-07; from 08-10, up to and including 08-10-13; from 08-11, up to and including 08-11-17; from 08-12, up to and including 08-12-03; …
Hitachi JP1/NETM/DM Client-Remote Control Feature: from 08-00, up to and including 08-00-06; from 08-01, up to and including 08-01-03; from 08-02, up to and including 08-02-04; from 08-10, up to and including 08-10-10; from 08-11, up to and including 08-11-06; from 08-50, up to and including 08-50-04; …
Hitachi JP1/NETM/DM Manager: from 08-00, up to and including 08-00-09; from 08-02, up to and including 08-02-07; from 08-10, up to and including 08-10-13; from 08-11, up to and including 08-11-17; from 08-50, up to and including 08-50-08; from 08-51, up to and including 08-51-18; …
Hitachi JP1/NETM/REMOTE Control Feature: from 08-00, up to and including 08-00-06; from 08-01, up to and including 08-01-03; from 08-02, up to and including 08-02-04; from 08-10, up to and including 08-10-10; from 08-11, up to and including 08-11-06; from 08-50, up to and including 08-50-04; …
Hitachi JP1/REMOTE Control Feature: from 11-00, up to and including 11-00-02; from 12-00, up to and including 12-00-011

Published 2021-10-12. Last modified 2026-06-17.