PT-2024-32202 · Hitachi · Hitachi Jp1/Extensible Snmp Agent For Windows+2

Kazuki Hirota

+3

·

Published

2024-07-02

·

Updated

2024-07-02

·

CVE-2024-4679

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Hitachi JP1/Extensible SNMP Agent for Windows versions 11-00 through 11-00-*, versions 12-00 through 12-00 before 12-00-01 Hitachi JP1/Extensible SNMP Agent versions 09-00 through 09-00-04, versions 10-00 through 10-00-02, versions 10-10 through 10-10-01 Hitachi Job Management Partner1/Extensible SNMP Agent versions 09-00 through 09-00-04, versions 10-00 through 10-00-02, versions 10-10 through 10-10-01
Description The issue affects the default permissions in the Hitachi JP1/Extensible SNMP Agent, allowing file manipulation.
Recommendations For Hitachi JP1/Extensible SNMP Agent for Windows versions 11-00 through 11-00-* and versions 12-00 through 12-00 before 12-00-01, update to version 12-00-01 or later. For Hitachi JP1/Extensible SNMP Agent versions 09-00 through 09-00-04, update to version 09-00-05 or later. For Hitachi JP1/Extensible SNMP Agent versions 10-00 through 10-00-02, update to version 10-00-03 or later. For Hitachi JP1/Extensible SNMP Agent versions 10-10 through 10-10-01, update to version 10-10-02 or later. For Hitachi Job Management Partner1/Extensible SNMP Agent versions 09-00 through 09-00-04, update to version 09-00-05 or later. For Hitachi Job Management Partner1/Extensible SNMP Agent versions 10-00 through 10-00-02, update to version 10-00-03 or later. For Hitachi Job Management Partner1/Extensible SNMP Agent versions 10-10 through 10-10-01, update to version 10-10-02 or later.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2024-4679

Affected Products

Hitachi Jp1/Extensible Snmp Agent
Hitachi Jp1/Extensible Snmp Agent For Windows
Hitachi Job Management Partner1/Extensible Snmp Agent