Hitachi JP1/IT Desktop Management-Manager vulnerabilities

3 CVEs affecting Hitachi JP1/IT Desktop Management-Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-29645, published 2021-10-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-29644, published 2021-10-12. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this…
CVE-2013-4697, published 2013-07-31. High severity, CVSS 9.0. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through 10-01-02; Hitachi Job…
CVE-2021-29645, published 2021-10-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker…