CVE-2021-29644: hitachi it_operations_director Integer Overflow or Wraparound

CVSS: 10.0v2.0HighModified

Published 12-10-2021Last modified 03-08-2024

Vulnerability summary

CVE-2021-29644 is a high (CVSS 10.0) Integer Overflow or Wraparound vulnerability in hitachi it_operations_director. EPSS estimates a 2.54% chance of exploitation in the next 30 days, higher than 84.7% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

2.54%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

12-10-2021
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this issue to execute code with unrestricted privileges on the underlying OS.

CVSS metrics

3 scores · 2 sources · 2 versions

v3.18.1v2.010.0

EPSS trend

Probability

2.54%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.54% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Affected systems

Hitachi14 products

it_operations_director≥ 02-50, ≤ 02-50-07 | ≥ 03-00, ≤ 03-00-12 | ≥ 04-00, ≤ 04-00-17 | ≥ 04-50, ≤ 04-50-16
job_management_partner_1\/it_desktop_management_2-manager≥ 10-50, ≤ 10-50-11
job_management_partner_1\/it_desktop_management-manager≥ 09-50, ≤ 09-50-03 | ≥ 10-01, ≤ 10-01-06 | ≥ 10-10, ≤ 10-10-16
job_management_partner_1\/remote_control_agent≥ 08-00, ≤ 08-00-04 | ≥ 08-10, ≤ 08-10-05 | ≥ 08-51, ≤ 08-51-18 | ≥ 09-00, ≤ 09-00-07 | ≥ 09-50, ≤ 09-50-09 | ≥ 09-51, ≤ 09-51-15
job_management_partner_1\/software_distribution_client≥ 08-00, ≤ 08-00-05 | ≥ 08-10, ≤ 08-10-06 | ≥ 08-51, ≤ 08-51-19 | ≥ 09-00, ≤ 09-00-09 | ≥ 09-50, ≤ 09-50-09 | ≥ 09-51, ≤ 09-51-13

job_management_partner_1\/software_distribution_manager≥ 08-00, ≤ 08-00-07 | ≥ 08-10, ≤ 08-10-06 | ≥ 08-51, ≤ 08-51-19 | ≥ 09-00, ≤ 09-00-09 | ≥ 09-50, ≤ 09-50-09 | ≥ 09-51, ≤ 09-51-13
jp1\/it_desktop_management_2-manager≥ 10-50, ≤ 10-50-12 | ≥ 11-00, ≤ 11-00-11 | ≥ 11-01, ≤ 11-01-12 | ≥ 11-10, ≤ 11-10-10 | ≥ 11-50, ≤ 11-50-08 | ≥ 11-51, ≤ 11-51-10 | ≥ 12-00, ≤ 12-00-09 | ≥ 12-10, ≤ 12-10-07 | ≥ 12-50, ≤ 12-50-03
jp1\/it_desktop_management_2-operations_director≥ 11-01, ≤ 11-01-12 | ≥ 11-10, ≤ 11-10-10 | ≥ 11-50, ≤ 11-50-08 | ≥ 11-51, ≤ 11-51-10 | ≥ 12-00, ≤ 12-00-09 | ≥ 12-10, ≤ 12-10-07 | ≥ 12-50, ≤ 12-50-03
jp1\/it_desktop_management-manager≥ 09-50, ≤ 09-50-03 | ≥ 09-51, ≤ 09-51-05 | ≥ 10-00, ≤ 10-00-02 | ≥ 10-01, ≤ 10-01-05 | ≥ 10-02, ≤ 10-02-05 | ≥ 10-10, ≤ 10-10-16
jp1\/netdm\/dm_client≥ 08-00, ≤ 08-00-09 | ≥ 08-01, ≤ 08-01-04 | ≥ 08-02, ≤ 08-02-07 | ≥ 08-10, ≤ 08-10-13 | ≥ 08-11, ≤ 08-11-17 | ≥ 08-12, ≤ 08-12-03 | ≥ 08-50, ≤ 08-50-08 | ≥ 08-51, ≤ 08-51-17 | ≥ 08-52, ≤ 08-52-22 | ≥ 09-00, ≤ 09-00-14 | ≥ 09-01, ≤ 09-01-14 | ≥ 09-10, ≤ 09-10-15 | ≥ 09-12, ≤ 09-12-16 | ≥ 09-50, ≤ 09-50-20 | ≥ 09-51, ≤ 09-51-14 | ≥ 10-10, ≤ 10-10-23
jp1\/netdm\/dm_client-remote_control_feature≥ 08-00, ≤ 08-00-06 | ≥ 08-01, ≤ 08-01-03 | ≥ 08-02, ≤ 08-02-04 | ≥ 08-10, ≤ 08-10-10 | ≥ 08-11, ≤ 08-11-06 | ≥ 08-50, ≤ 08-50-04 | ≥ 08-51, ≤ 08-51-14 | ≥ 09-00, ≤ 09-00-13 | ≥ 09-01, ≤ 09-01-12 | ≥ 09-10, ≤ 09-10-13 | ≥ 09-50, ≤ 09-50-19 | ≥ 09-51, ≤ 09-51-08 | ≥ 10-10, ≤ 10-10-20
jp1\/netdm\/dm_manager≥ 08-00, ≤ 08-00-09 | ≥ 08-02, ≤ 08-02-07 | ≥ 08-10, ≤ 08-10-13 | ≥ 08-11, ≤ 08-11-17 | ≥ 08-50, ≤ 08-50-08 | ≥ 08-51, ≤ 08-51-18 | ≥ 08-52, ≤ 08-52-22 | ≥ 09-00, ≤ 09-00-14 | ≥ 09-01, ≤ 09-01-14 | ≥ 09-10, ≤ 09-10-15 | ≥ 09-12, ≤ 09-12-15 | ≥ 09-50, ≤ 09-50-20 | ≥ 09-51, ≤ 09-51-14 | ≥ 10-10, ≤ 10-10-24
jp1\/netm\/remote_control_agent≥ 08-00, ≤ 08-00-06 | ≥ 08-01, ≤ 08-01-03 | ≥ 08-02, ≤ 08-02-04 | ≥ 08-10, ≤ 08-10-10 | ≥ 08-11, ≤ 08-11-06 | ≥ 08-50, ≤ 08-50-04 | ≥ 08-51, ≤ 08-51-14 | ≥ 09-00, ≤ 09-00-13 | ≥ 09-01, ≤ 09-01-12 | ≥ 09-50, ≤ 09-50-20 | ≥ 09-51, ≤ 09-51-08 | ≥ 10-10, ≤ 10-10-20
jp1\/remote_control_agent≥ 11-00, ≤ 11-00-02 | ≥ 12-00, ≤ 12-00-01

Show all 14

1 vendor · 14 products

References

1 links

www.hitachi.com/hirt/security/index.htmlX Refsource MISCVendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities