CVE-2021-29645: hitachi it_operations_director

CVSS: 7.8v3.1HighModified

Published 12-10-2021Last modified 03-08-2024

Vulnerability summary

CVE-2021-29645 is a high (CVSS 7.8) vulnerability in hitachi it_operations_director. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.8% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.1 (NVD)

EPSS score

0.22%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

12-10-2021
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.

CVSS metrics

3 scores · 2 sources · 2 versions

v3.17.8v2.04.6

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.22% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Hitachi14 products

it_operations_director≥ 02-50, ≤ 02-50-07 | ≥ 03-00, ≤ 03-00-12 | ≥ 04-00, ≤ 04-00-17 | ≥ 04-50, ≤ 04-50-16
job_management_partner_1\/it_desktop_management_2-manager≥ 10-50, ≤ 10-50-11
job_management_partner_1\/it_desktop_management-manager≥ 09-50, ≤ 09-50-03 | ≥ 10-01, ≤ 10-01-06 | ≥ 10-10, ≤ 10-10-16
job_management_partner_1\/remote_control_agent≥ 08-00, ≤ 08-00-04 | ≥ 08-10, ≤ 08-10-05 | ≥ 08-51, ≤ 08-51-18 | ≥ 09-00, ≤ 09-00-07 | ≥ 09-50, ≤ 09-50-09 | ≥ 09-51, ≤ 09-51-15
job_management_partner_1\/software_distribution_client≥ 08-00, ≤ 08-00-05 | ≥ 08-10, ≤ 08-10-06 | ≥ 08-51, ≤ 08-51-19 | ≥ 09-00, ≤ 09-00-09 | ≥ 09-50, ≤ 09-50-09 | ≥ 09-51, ≤ 09-51-13

job_management_partner_1\/software_distribution_manager≥ 08-00, ≤ 08-00-07 | ≥ 08-10, ≤ 08-10-06 | ≥ 08-51, ≤ 08-51-19 | ≥ 09-00, ≤ 09-00-09 | ≥ 09-50, ≤ 09-50-09 | ≥ 09-51, ≤ 09-51-13
jp1\/it_desktop_management_2-manager≥ 10-50, ≤ 10-50-12 | ≥ 11-00, ≤ 11-00-11 | ≥ 11-01, ≤ 11-01-12 | ≥ 11-10, ≤ 11-10-10 | ≥ 11-50, ≤ 11-50-08 | ≥ 11-51, ≤ 11-51-10 | ≥ 12-00, ≤ 12-00-09 | ≥ 12-10, ≤ 12-10-07 | ≥ 12-50, ≤ 12-50-03
jp1\/it_desktop_management_2-operations_director≥ 11-01, ≤ 11-01-12 | ≥ 11-10, ≤ 11-10-10 | ≥ 11-50, ≤ 11-50-08 | ≥ 11-51, ≤ 11-51-10 | ≥ 12-00, ≤ 12-00-09 | ≥ 12-10, ≤ 12-10-07 | ≥ 12-50, ≤ 12-50-03
jp1\/it_desktop_management-manager≥ 09-50, ≤ 09-50-03 | ≥ 09-51, ≤ 09-51-05 | ≥ 10-00, ≤ 10-00-02 | ≥ 10-01, ≤ 10-01-05 | ≥ 10-02, ≤ 10-02-05 | ≥ 10-10, ≤ 10-10-16
jp1\/netm\/dm_client≥ 08-00, ≤ 08-00-09 | ≥ 08-01, ≤ 08-01-04 | ≥ 08-02, ≤ 08-02-07 | ≥ 08-10, ≤ 08-10-13 | ≥ 08-11, ≤ 08-11-17 | ≥ 08-12, ≤ 08-12-03 | ≥ 08-50, ≤ 08-50-08 | ≥ 08-51, ≤ 08-51-17 | ≥ 08-52, ≤ 08-52-22 | ≥ 09-00, ≤ 09-00-14 | ≥ 09-01, ≤ 09-01-14 | ≥ 09-10, ≤ 09-10-15 | ≥ 09-12, ≤ 09-12-16 | ≥ 09-50, ≤ 09-50-20 | ≥ 09-51, ≤ 09-51-14 | ≥ 10-10, ≤ 10-10-23
jp1\/netm\/dm_client-remote_control_feature≥ 08-00, ≤ 08-00-06 | ≥ 08-01, ≤ 08-01-03 | ≥ 08-02, ≤ 08-02-04 | ≥ 08-10, ≤ 08-10-10 | ≥ 08-11, ≤ 08-11-06 | ≥ 08-50, ≤ 08-50-04 | ≥ 08-51, ≤ 08-51-14 | ≥ 09-00, ≤ 09-00-13 | ≥ 09-01, ≤ 09-01-12 | ≥ 09-10, ≤ 09-10-13 | ≥ 09-50, ≤ 09-50-19 | ≥ 09-51, ≤ 09-51-08 | ≥ 10-10, ≤ 10-10-20
jp1\/netm\/dm_manager≥ 08-00, ≤ 08-00-09 | ≥ 08-02, ≤ 08-02-07 | ≥ 08-10, ≤ 08-10-13 | ≥ 08-11, ≤ 08-11-17 | ≥ 08-50, ≤ 08-50-08 | ≥ 08-51, ≤ 08-51-18 | ≥ 08-52, ≤ 08-52-22 | ≥ 09-00, ≤ 09-00-14 | ≥ 09-01, ≤ 09-01-14 | ≥ 09-10, ≤ 09-10-15 | ≥ 09-12, ≤ 09-12-15 | ≥ 09-50, ≤ 09-50-20 | ≥ 09-51, ≤ 09-51-14 | ≥ 10-10, ≤ 10-10-24
jp1\/netm\/remote_control_feature≥ 08-00, ≤ 08-00-06 | ≥ 08-01, ≤ 08-01-03 | ≥ 08-02, ≤ 08-02-04 | ≥ 08-10, ≤ 08-10-10 | ≥ 08-11, ≤ 08-11-06 | ≥ 08-50, ≤ 08-50-04 | ≥ 08-51, ≤ 08-51-14 | ≥ 09-00, ≤ 09-00-13 | ≥ 09-01, ≤ 09-01-12 | ≥ 09-50, ≤ 09-50-20 | ≥ 09-51, ≤ 09-51-08 | ≥ 10-10, ≤ 10-10-20
jp1\/remote_control_feature≥ 11-00, ≤ 11-00-02 | ≥ 12-00, ≤ 12-00-011

Show all 14

1 vendor · 14 products

References

1 links

www.hitachi.com/hirt/security/index.htmlX Refsource MISCVendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities