CVE-2021-29645: High severity hitachi it operations director vulnerability
Published Oct 12, 2021
·Updated
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.
Affected Software
106 affected components
Hitachi IT Operations Director>=02-50<=02-50-07
Hitachi IT Operations Director>=03-00<=03-00-12
Hitachi IT Operations Director>=04-00<=04-00-17
Hitachi IT Operations Director>=04-50<=04-50-16
Hitachi Job Management Partner 1\/it Desktop Management-manager>=09-50<=09-50-03
Hitachi Job Management Partner 1\/it Desktop Management-manager>=10-01<=10-01-06
Hitachi Job Management Partner 1\/it Desktop Management-manager>=10-10<=10-10-16
Hitachi Job Management Partner 1\/it Desktop Management 2-manager>=10-50<=10-50-11
Hitachi Job Management Partner 1\/remote Control Agent>=08-00<=08-00-04
Hitachi Job Management Partner 1\/remote Control Agent>=08-10<=08-10-05
Hitachi Job Management Partner 1\/remote Control Agent>=08-51<=08-51-18
Hitachi Job Management Partner 1\/remote Control Agent>=09-00<=09-00-07
Hitachi Job Management Partner 1\/remote Control Agent>=09-50<=09-50-09
Hitachi Job Management Partner 1\/remote Control Agent>=09-51<=09-51-15
Hitachi Job Management Partner 1\/software Distribution Client>=08-00<=08-00-05
Hitachi Job Management Partner 1\/software Distribution Client>=08-10<=08-10-06
Hitachi Job Management Partner 1\/software Distribution Client>=08-51<=08-51-19
Hitachi Job Management Partner 1\/software Distribution Client>=09-00<=09-00-09
Hitachi Job Management Partner 1\/software Distribution Client>=09-50<=09-50-09
Hitachi Job Management Partner 1\/software Distribution Client>=09-51<=09-51-13
Hitachi Job Management Partner 1\/software Distribution Manager>=08-00<=08-00-07
Hitachi Job Management Partner 1\/software Distribution Manager>=08-10<=08-10-06
Hitachi Job Management Partner 1\/software Distribution Manager>=08-51<=08-51-19
Hitachi Job Management Partner 1\/software Distribution Manager>=09-00<=09-00-09
Hitachi Job Management Partner 1\/software Distribution Manager>=09-50<=09-50-09
Hitachi Job Management Partner 1\/software Distribution Manager>=09-51<=09-51-13
Hitachi Jp1\/it Desktop Management-manager>=09-50<=09-50-03
Hitachi Jp1\/it Desktop Management-manager>=09-51<=09-51-05
Hitachi Jp1\/it Desktop Management-manager>=10-00<=10-00-02
Hitachi Jp1\/it Desktop Management-manager>=10-01<=10-01-05
Hitachi Jp1\/it Desktop Management-manager>=10-02<=10-02-05
Hitachi Jp1\/it Desktop Management-manager>=10-10<=10-10-16
Hitachi Jp1\/it Desktop Management 2-manager>=10-50<=10-50-12
Hitachi Jp1\/it Desktop Management 2-manager>=11-00<=11-00-11
Hitachi Jp1\/it Desktop Management 2-manager>=11-01<=11-01-12
Hitachi Jp1\/it Desktop Management 2-manager>=11-10<=11-10-10
Hitachi Jp1\/it Desktop Management 2-manager>=11-50<=11-50-08
Hitachi Jp1\/it Desktop Management 2-manager>=11-51<=11-51-10
Hitachi Jp1\/it Desktop Management 2-manager>=12-00<=12-00-09
Hitachi Jp1\/it Desktop Management 2-manager>=12-10<=12-10-07
Hitachi Jp1\/it Desktop Management 2-manager>=12-50<=12-50-03
Hitachi Jp1\/it Desktop Management 2-operations Director>=11-01<=11-01-12
Hitachi Jp1\/it Desktop Management 2-operations Director>=11-10<=11-10-10
Hitachi Jp1\/it Desktop Management 2-operations Director>=11-50<=11-50-08
Hitachi Jp1\/it Desktop Management 2-operations Director>=11-51<=11-51-10
Hitachi Jp1\/it Desktop Management 2-operations Director>=12-00<=12-00-09
Hitachi Jp1\/it Desktop Management 2-operations Director>=12-10<=12-10-07
Hitachi Jp1\/it Desktop Management 2-operations Director>=12-50<=12-50-03
Hitachi Jp1\/netm\/dm Client>=08-00<=08-00-09
Hitachi Jp1\/netm\/dm Client>=08-01<=08-01-04
Hitachi Jp1\/netm\/dm Client>=08-02<=08-02-07
Hitachi Jp1\/netm\/dm Client>=08-10<=08-10-13
Hitachi Jp1\/netm\/dm Client>=08-11<=08-11-17
Hitachi Jp1\/netm\/dm Client>=08-12<=08-12-03
Hitachi Jp1\/netm\/dm Client>=08-50<=08-50-08
Hitachi Jp1\/netm\/dm Client>=08-51<=08-51-17
Hitachi Jp1\/netm\/dm Client>=08-52<=08-52-22
Hitachi Jp1\/netm\/dm Client>=09-00<=09-00-14
Hitachi Jp1\/netm\/dm Client>=09-01<=09-01-14
Hitachi Jp1\/netm\/dm Client>=09-10<=09-10-15
Hitachi Jp1\/netm\/dm Client>=09-12<=09-12-16
Hitachi Jp1\/netm\/dm Client>=09-50<=09-50-20
Hitachi Jp1\/netm\/dm Client>=09-51<=09-51-14
Hitachi Jp1\/netm\/dm Client>=10-10<=10-10-23
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=08-00<=08-00-06
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=08-01<=08-01-03
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=08-02<=08-02-04
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=08-10<=08-10-10
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=08-11<=08-11-06
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=08-50<=08-50-04
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=08-51<=08-51-14
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=09-00<=09-00-13
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=09-01<=09-01-12
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=09-10<=09-10-13
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=09-50<=09-50-19
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=09-51<=09-51-08
Hitachi Jp1\/netm\/dm Client-remote Control Feature>=10-10<=10-10-20
Hitachi Jp1\/netm\/dm Manager>=08-00<=08-00-09
Hitachi Jp1\/netm\/dm Manager>=08-02<=08-02-07
Hitachi Jp1\/netm\/dm Manager>=08-10<=08-10-13
Hitachi Jp1\/netm\/dm Manager>=08-11<=08-11-17
Hitachi Jp1\/netm\/dm Manager>=08-50<=08-50-08
Hitachi Jp1\/netm\/dm Manager>=08-51<=08-51-18
Hitachi Jp1\/netm\/dm Manager>=08-52<=08-52-22
Hitachi Jp1\/netm\/dm Manager>=09-00<=09-00-14
Hitachi Jp1\/netm\/dm Manager>=09-01<=09-01-14
Hitachi Jp1\/netm\/dm Manager>=09-10<=09-10-15
Hitachi Jp1\/netm\/dm Manager>=09-12<=09-12-15
Hitachi Jp1\/netm\/dm Manager>=09-50<=09-50-20
Hitachi Jp1\/netm\/dm Manager>=09-51<=09-51-14
Hitachi Jp1\/netm\/dm Manager>=10-10<=10-10-24
Hitachi Jp1\/netm\/remote Control Feature>=08-00<=08-00-06
Hitachi Jp1\/netm\/remote Control Feature>=08-01<=08-01-03
Hitachi Jp1\/netm\/remote Control Feature>=08-02<=08-02-04
Hitachi Jp1\/netm\/remote Control Feature>=08-10<=08-10-10
Hitachi Jp1\/netm\/remote Control Feature>=08-11<=08-11-06
Hitachi Jp1\/netm\/remote Control Feature>=08-50<=08-50-04
Hitachi Jp1\/netm\/remote Control Feature>=08-51<=08-51-14
Hitachi Jp1\/netm\/remote Control Feature>=09-00<=09-00-13
Hitachi Jp1\/netm\/remote Control Feature>=09-01<=09-01-12
Hitachi Jp1\/netm\/remote Control Feature>=09-50<=09-50-20
Hitachi Jp1\/netm\/remote Control Feature>=09-51<=09-51-08
Hitachi Jp1\/netm\/remote Control Feature>=10-10<=10-10-20
Hitachi Jp1\/remote Control Feature>=11-00<=11-00-02
Hitachi Jp1\/remote Control Feature>=12-00<=12-00-011
Microsoft Windows
Event History
Oct 12, 2021
CVE Published
via MITRE·06:30 PM
Data Sourced
via MITRE·06:30 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2021-29645?
CVE-2021-29645 is classified as a local privilege escalation vulnerability.
2
How do I fix CVE-2021-29645?
To mitigate CVE-2021-29645, update the affected Hitachi software products to the latest available versions that address this vulnerability.
3
Which Hitachi products are affected by CVE-2021-29645?
CVE-2021-29645 affects multiple versions of Hitachi IT Operations Director, Job Management Partner 1, and related software.
4
What type of vulnerability is CVE-2021-29645?
CVE-2021-29645 is a local privilege escalation vulnerability that allows an attacker to execute arbitrary code on the affected system.
5
Can CVE-2021-29645 be exploited remotely?
CVE-2021-29645 cannot be exploited remotely, as it requires local access to the affected system.