PT-2021-18381 · Hitachi · Hitachi Jp1/It Desktop Management 2 Agent

Published 2021-10-12 · Updated 2021-10-20 · CVE-2021-29644

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hitachi JP1/IT Desktop Management 2 Agent versions 9 through 12

Description The issue is a remote code execution vulnerability due to an Integer Overflow. An attacker with network access to port 31016 can exploit this to execute code with unrestricted privileges on the underlying OS.

Recommendations For versions 9 through 12, update to a version that fixes the Integer Overflow issue to prevent remote code execution. As a temporary workaround, consider restricting access to port 31016 to minimize the risk of exploitation.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2021-29644

Affected Products

Hitachi Jp1/It Desktop Management 2 Agent

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-29644 · Security Note
• https://hitachi.com/hirt/security/index.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29644 · Vendor Advisory
• https://t.me/cibsecurity/30442 · Telegram Post