Tracker / CVE-2021-29645
CVE-2021-29645
High 7.0
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.
Affected products and versions
| hitachi | it_operations_director · 02-50 → 02-50-07 |
|---|---|
| hitachi | it_operations_director · 03-00 → 03-00-12 |
| hitachi | it_operations_director · 04-00 → 04-00-17 |
| hitachi | it_operations_director · 04-50 → 04-50-16 |
| hitachi | job_management_partner_1\/it_desktop_management-manager · 09-50 → 09-50-03 |
| hitachi | job_management_partner_1\/it_desktop_management-manager · 10-01 → 10-01-06 |
| hitachi | job_management_partner_1\/it_desktop_management-manager · 10-10 → 10-10-16 |
| hitachi | job_management_partner_1\/it_desktop_management_2-manager · 10-50 → 10-50-11 |
| hitachi | job_management_partner_1\/remote_control_agent · 08-00 → 08-00-04 |
| hitachi | job_management_partner_1\/remote_control_agent · 08-10 → 08-10-05 |
| hitachi | job_management_partner_1\/remote_control_agent · 08-51 → 08-51-18 |
| hitachi | job_management_partner_1\/remote_control_agent · 09-00 → 09-00-07 |
| hitachi | job_management_partner_1\/remote_control_agent · 09-50 → 09-50-09 |
| hitachi | job_management_partner_1\/remote_control_agent · 09-51 → 09-51-15 |
| hitachi | job_management_partner_1\/software_distribution_client · 08-00 → 08-00-05 |
| hitachi | job_management_partner_1\/software_distribution_client · 08-10 → 08-10-06 |
| hitachi | job_management_partner_1\/software_distribution_client · 08-51 → 08-51-19 |
| hitachi | job_management_partner_1\/software_distribution_client · 09-00 → 09-00-09 |
| hitachi | job_management_partner_1\/software_distribution_client · 09-50 → 09-50-09 |
| hitachi | job_management_partner_1\/software_distribution_client · 09-51 → 09-51-13 |
| hitachi | job_management_partner_1\/software_distribution_manager · 08-00 → 08-00-07 |
| hitachi | job_management_partner_1\/software_distribution_manager · 08-10 → 08-10-06 |
| hitachi | job_management_partner_1\/software_distribution_manager · 08-51 → 08-51-19 |
| hitachi | job_management_partner_1\/software_distribution_manager · 09-00 → 09-00-09 |
| hitachi | job_management_partner_1\/software_distribution_manager · 09-50 → 09-50-09 |
| hitachi | job_management_partner_1\/software_distribution_manager · 09-51 → 09-51-13 |
| hitachi | jp1\/it_desktop_management-manager · 09-50 → 09-50-03 |
| hitachi | jp1\/it_desktop_management-manager · 09-51 → 09-51-05 |
| hitachi | jp1\/it_desktop_management-manager · 10-00 → 10-00-02 |
| hitachi | jp1\/it_desktop_management-manager · 10-01 → 10-01-05 |
| hitachi | jp1\/it_desktop_management-manager · 10-02 → 10-02-05 |
| hitachi | jp1\/it_desktop_management-manager · 10-10 → 10-10-16 |
| hitachi | jp1\/it_desktop_management_2-manager · 10-50 → 10-50-12 |
| hitachi | jp1\/it_desktop_management_2-manager · 11-00 → 11-00-11 |
| hitachi | jp1\/it_desktop_management_2-manager · 11-01 → 11-01-12 |
| hitachi | jp1\/it_desktop_management_2-manager · 11-10 → 11-10-10 |
| hitachi | jp1\/it_desktop_management_2-manager · 11-50 → 11-50-08 |
| hitachi | jp1\/it_desktop_management_2-manager · 11-51 → 11-51-10 |
| hitachi | jp1\/it_desktop_management_2-manager · 12-00 → 12-00-09 |
| hitachi | jp1\/it_desktop_management_2-manager · 12-10 → 12-10-07 |
| hitachi | jp1\/it_desktop_management_2-manager · 12-50 → 12-50-03 |
| hitachi | jp1\/it_desktop_management_2-operations_director · 11-01 → 11-01-12 |
| hitachi | jp1\/it_desktop_management_2-operations_director · 11-10 → 11-10-10 |
| hitachi | jp1\/it_desktop_management_2-operations_director · 11-50 → 11-50-08 |
| hitachi | jp1\/it_desktop_management_2-operations_director · 11-51 → 11-51-10 |
| hitachi | jp1\/it_desktop_management_2-operations_director · 12-00 → 12-00-09 |
| hitachi | jp1\/it_desktop_management_2-operations_director · 12-10 → 12-10-07 |
| hitachi | jp1\/it_desktop_management_2-operations_director · 12-50 → 12-50-03 |
| hitachi | jp1\/netm\/dm_client · 08-00 → 08-00-09 |
| hitachi | jp1\/netm\/dm_client · 08-01 → 08-01-04 |
| hitachi | jp1\/netm\/dm_client · 08-02 → 08-02-07 |
| hitachi | jp1\/netm\/dm_client · 08-10 → 08-10-13 |
| hitachi | jp1\/netm\/dm_client · 08-11 → 08-11-17 |
| hitachi | jp1\/netm\/dm_client · 08-12 → 08-12-03 |
| hitachi | jp1\/netm\/dm_client · 08-50 → 08-50-08 |
| hitachi | jp1\/netm\/dm_client · 08-51 → 08-51-17 |
| hitachi | jp1\/netm\/dm_client · 08-52 → 08-52-22 |
| hitachi | jp1\/netm\/dm_client · 09-00 → 09-00-14 |
| hitachi | jp1\/netm\/dm_client · 09-01 → 09-01-14 |
| hitachi | jp1\/netm\/dm_client · 09-10 → 09-10-15 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.