PT-2025-21269 · Microsoft+1 · Windows+1

Published 2025-05-15 · Updated 2025-05-15 · CVE-2025-27524

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Hitachi JP1/IT Desktop Management 2 - Smart Device Manager versions 10-50 through 10-50-06 Hitachi JP1/IT Desktop Management 2 - Smart Device Manager versions 11-00 through 11-00-05 Hitachi JP1/IT Desktop Management 2 - Smart Device Manager versions 11-10 through 11-10-08 Hitachi JP1/IT Desktop Management 2 - Smart Device Manager versions 12-00 before 12-00-08

Description: A weak encryption issue has been identified in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.

Recommendations: For versions 10-50 through 10-50-06, update to a version after 10-50-06. For versions 11-00 through 11-00-05, update to a version after 11-00-05. For versions 11-10 through 11-10-08, update to a version after 11-10-08. For versions 12-00 before 12-00-08, update to version 12-00-08 or later.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2025-27524

Affected Products

Hitachi Jp1/It Desktop Management 2 - Smart Device Manager

Windows

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-27524 · Security Note
• https://hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-115/index.html · Vendor Advisory
• https://t.me/cvetracker/23893 · Telegram Post
• https://twitter.com/CVEnew/status/1922907413499236854 · Twitter Post
• https://t.me/cvenotify/122277 · Telegram Post