CVE-2021-29644 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2021-29644

Analyzed

More Info Official Page

Source-cve@mitre.org

Published At-12 Oct, 2021 | 19:15

Updated At-20 Oct, 2021 | 17:18

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this issue to execute code with unrestricted privileges on the underlying OS.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

>>it_operations_director>>Versions from 02-50(inclusive) to 02-50-07(inclusive)

cpe:2.3:a:hitachi:it_operations_director:*:*:*:*:*:*:*:*

>>it_operations_director>>Versions from 03-00(inclusive) to 03-00-12(inclusive)

cpe:2.3:a:hitachi:it_operations_director:*:*:*:*:*:*:*:*

>>it_operations_director>>Versions from 04-00(inclusive) to 04-00-17(inclusive)

cpe:2.3:a:hitachi:it_operations_director:*:*:*:*:*:*:*:*

>>it_operations_director>>Versions from 04-50(inclusive) to 04-50-16(inclusive)

cpe:2.3:a:hitachi:it_operations_director:*:*:*:*:*:*:*:*

>>job_management_partner_1\/it_desktop_management-manager>>Versions from 09-50(inclusive) to 09-50-03(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management-manager:*:*:*:*:*:*:*:*

>>job_management_partner_1\/it_desktop_management-manager>>Versions from 10-01(inclusive) to 10-01-06(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management-manager:*:*:*:*:*:*:*:*

>>job_management_partner_1\/it_desktop_management-manager>>Versions from 10-10(inclusive) to 10-10-16(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management-manager:*:*:*:*:*:*:*:*

>>job_management_partner_1\/it_desktop_management_2-manager>>Versions from 10-50(inclusive) to 10-50-11(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>job_management_partner_1\/remote_control_agent>>Versions from 08-00(inclusive) to 08-00-04(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/remote_control_agent:*:*:*:*:*:*:*:*

>>job_management_partner_1\/remote_control_agent>>Versions from 08-10(inclusive) to 08-10-05(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/remote_control_agent:*:*:*:*:*:*:*:*

>>job_management_partner_1\/remote_control_agent>>Versions from 08-51(inclusive) to 08-51-18(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/remote_control_agent:*:*:*:*:*:*:*:*

>>job_management_partner_1\/remote_control_agent>>Versions from 09-00(inclusive) to 09-00-07(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/remote_control_agent:*:*:*:*:*:*:*:*

>>job_management_partner_1\/remote_control_agent>>Versions from 09-50(inclusive) to 09-50-09(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/remote_control_agent:*:*:*:*:*:*:*:*

>>job_management_partner_1\/remote_control_agent>>Versions from 09-51(inclusive) to 09-51-15(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/remote_control_agent:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_client>>Versions from 08-00(inclusive) to 08-00-05(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_client:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_client>>Versions from 08-10(inclusive) to 08-10-06(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_client:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_client>>Versions from 08-51(inclusive) to 08-51-19(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_client:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_client>>Versions from 09-00(inclusive) to 09-00-09(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_client:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_client>>Versions from 09-50(inclusive) to 09-50-09(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_client:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_client>>Versions from 09-51(inclusive) to 09-51-13(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_client:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_manager>>Versions from 08-00(inclusive) to 08-00-07(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_manager:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_manager>>Versions from 08-10(inclusive) to 08-10-06(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_manager:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_manager>>Versions from 08-51(inclusive) to 08-51-19(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_manager:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_manager>>Versions from 09-00(inclusive) to 09-00-09(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_manager:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_manager>>Versions from 09-50(inclusive) to 09-50-09(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_manager:*:*:*:*:*:*:*:*

>>job_management_partner_1\/software_distribution_manager>>Versions from 09-51(inclusive) to 09-51-13(inclusive)

cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management-manager>>Versions from 09-50(inclusive) to 09-50-03(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management-manager>>Versions from 09-51(inclusive) to 09-51-05(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management-manager>>Versions from 10-00(inclusive) to 10-00-02(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management-manager>>Versions from 10-01(inclusive) to 10-01-05(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management-manager>>Versions from 10-02(inclusive) to 10-02-05(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management-manager>>Versions from 10-10(inclusive) to 10-10-16(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-manager>>Versions from 10-50(inclusive) to 10-50-12(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-manager>>Versions from 11-00(inclusive) to 11-00-11(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-manager>>Versions from 11-01(inclusive) to 11-01-12(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-manager>>Versions from 11-10(inclusive) to 11-10-10(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-manager>>Versions from 11-50(inclusive) to 11-50-08(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-manager>>Versions from 11-51(inclusive) to 11-51-10(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-manager>>Versions from 12-00(inclusive) to 12-00-09(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-manager>>Versions from 12-10(inclusive) to 12-10-07(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-manager>>Versions from 12-50(inclusive) to 12-50-03(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-operations_director>>Versions from 11-01(inclusive) to 11-01-12(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-operations_director>>Versions from 11-10(inclusive) to 11-10-10(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-operations_director>>Versions from 11-50(inclusive) to 11-50-08(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-operations_director>>Versions from 11-51(inclusive) to 11-51-10(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-operations_director>>Versions from 12-00(inclusive) to 12-00-09(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-operations_director>>Versions from 12-10(inclusive) to 12-10-07(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:*

>>jp1\/it_desktop_management_2-operations_director>>Versions from 12-50(inclusive) to 12-50-03(inclusive)

cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:*

>>jp1\/netdm\/dm_client>>Versions from 08-00(inclusive) to 08-00-09(inclusive)

cpe:2.3:a:hitachi:jp1\/netdm\/dm_client:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-190	Primary	nvd@nist.gov

CWE ID: CWE-190

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.hitachi.com/hirt/security/index.html	cve@mitre.org	Vendor Advisory

Hyperlink: https://www.hitachi.com/hirt/security/index.html

Source: cve@mitre.org

Resource:

Vendor Advisory