Vulnerability CVE-2021-29645

Vulnerability Name:

CVE-2021-29645 (CCN-211227)

Assigned:

2021-03-30

Published:

2021-03-30

Updated:

2022-07-12

Summary:

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.

CVSS v3 Severity:

7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.8 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2021-29645

Source: XF
Type: UNKNOWN
hitachi-cve202129645-priv-esc(211227)

Source: CCN
Type: Hitachi Security Advisory
Hitachi JP1/IT Desktop Management

Source: MISC
Type: Vendor Advisory
https://www.hitachi.com/hirt/security/index.html

Vulnerable Configuration:

Configuration 1:

cpe:/a:hitachi:job_management_partner_1/remote_control_agent:*:*:*:*:*:*:*:* (Version >= 09-00 and <= 09-00-07)

OR cpe:/a:hitachi:job_management_partner_1/remote_control_agent:*:*:*:*:*:*:*:* (Version >= 09-51 and <= 09-51-15)

OR cpe:/a:hitachi:it_operations_director:*:*:*:*:*:*:*:* (Version >= 03-00 and <= 03-00-12)

OR cpe:/a:hitachi:it_operations_director:*:*:*:*:*:*:*:* (Version >= 04-00 and <= 04-00-17)

OR cpe:/a:hitachi:it_operations_director:*:*:*:*:*:*:*:* (Version >= 04-50 and <= 04-50-16)

OR cpe:/a:hitachi:it_operations_director:*:*:*:*:*:*:*:* (Version >= 02-50 and <= 02-50-07)

OR cpe:/a:hitachi:job_management_partner_1/remote_control_agent:*:*:*:*:*:*:*:* (Version >= 09-50 and <= 09-50-09)

OR cpe:/a:hitachi:job_management_partner_1/remote_control_agent:*:*:*:*:*:*:*:* (Version >= 08-00 and <= 08-00-04)

OR cpe:/a:hitachi:job_management_partner_1/remote_control_agent:*:*:*:*:*:*:*:* (Version >= 08-10 and <= 08-10-05)

OR cpe:/a:hitachi:job_management_partner_1/it_desktop_management-manager:*:*:*:*:*:*:*:* (Version >= 09-50 and <= 09-50-03)

OR cpe:/a:hitachi:job_management_partner_1/it_desktop_management-manager:*:*:*:*:*:*:*:* (Version >= 10-01 and <= 10-01-06)

OR cpe:/a:hitachi:job_management_partner_1/it_desktop_management-manager:*:*:*:*:*:*:*:* (Version >= 10-10 and <= 10-10-16)

OR cpe:/a:hitachi:job_management_partner_1/remote_control_agent:*:*:*:*:*:*:*:* (Version >= 08-51 and <= 08-51-18)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_client:*:*:*:*:*:*:*:* (Version >= 08-00 and <= 08-00-05)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_client:*:*:*:*:*:*:*:* (Version >= 08-10 and <= 08-10-06)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_client:*:*:*:*:*:*:*:* (Version >= 08-51 and <= 08-51-19)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_client:*:*:*:*:*:*:*:* (Version >= 09-00 and <= 09-00-09)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_client:*:*:*:*:*:*:*:* (Version >= 09-50 and <= 09-50-09)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_client:*:*:*:*:*:*:*:* (Version >= 09-51 and <= 09-51-13)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_manager:*:*:*:*:*:*:*:* (Version >= 08-00 and <= 08-00-07)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_manager:*:*:*:*:*:*:*:* (Version >= 08-10 and <= 08-10-06)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_manager:*:*:*:*:*:*:*:* (Version >= 08-51 and <= 08-51-19)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_manager:*:*:*:*:*:*:*:* (Version >= 09-00 and <= 09-00-09)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_manager:*:*:*:*:*:*:*:* (Version >= 09-50 and <= 09-50-09)

OR cpe:/a:hitachi:job_management_partner_1/software_distribution_manager:*:*:*:*:*:*:*:* (Version >= 09-51 and <= 09-51-13)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:* (Version >= 11-01 and <= 11-01-12)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:* (Version >= 11-10 and <= 11-10-10)

OR cpe:/a:hitachi:job_management_partner_1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 10-50 and <= 10-50-11)

OR cpe:/a:hitachi:jp1/it_desktop_management-manager:*:*:*:*:*:*:*:* (Version >= 09-50 and <= 09-50-03)

OR cpe:/a:hitachi:jp1/it_desktop_management-manager:*:*:*:*:*:*:*:* (Version >= 09-51 and <= 09-51-05)

OR cpe:/a:hitachi:jp1/it_desktop_management-manager:*:*:*:*:*:*:*:* (Version >= 10-00 and <= 10-00-02)

OR cpe:/a:hitachi:jp1/it_desktop_management-manager:*:*:*:*:*:*:*:* (Version >= 10-01 and <= 10-01-05)

OR cpe:/a:hitachi:jp1/it_desktop_management-manager:*:*:*:*:*:*:*:* (Version >= 10-02 and <= 10-02-05)

OR cpe:/a:hitachi:jp1/it_desktop_management-manager:*:*:*:*:*:*:*:* (Version >= 10-10 and <= 10-10-16)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 10-50 and <= 10-50-12)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 11-00 and <= 11-00-11)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 11-01 and <= 11-01-12)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 11-10 and <= 11-10-10)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 11-50 and <= 11-50-08)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 11-51 and <= 11-51-10)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 12-00 and <= 12-00-09)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 12-10 and <= 12-10-07)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-manager:*:*:*:*:*:*:*:* (Version >= 12-50 and <= 12-50-03)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:* (Version >= 11-50 and <= 11-50-08)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:* (Version >= 11-51 and <= 11-51-10)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:* (Version >= 12-00 and <= 12-00-09)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:* (Version >= 12-10 and <= 12-10-07)

OR cpe:/a:hitachi:jp1/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:* (Version >= 12-50 and <= 12-50-03)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 08-12 and <= 08-12-03)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 08-50 and <= 08-50-08)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 08-51 and <= 08-51-17)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 08-52 and <= 08-52-22)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 09-00 and <= 09-00-14)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 09-01 and <= 09-01-14)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 09-10 and <= 09-10-15)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 09-12 and <= 09-12-16)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 09-50 and <= 09-50-20)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 10-10 and <= 10-10-23)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 08-00 and <= 08-00-09)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 08-02 and <= 08-02-07)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 08-10 and <= 08-10-13)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 08-11 and <= 08-11-17)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 08-50 and <= 08-50-08)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 08-00 and <= 08-00-09)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 08-01 and <= 08-01-04)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 08-02 and <= 08-02-07)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 08-10 and <= 08-10-13)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 08-11 and <= 08-11-17)

OR cpe:/a:hitachi:jp1/netm/dm_client:*:*:*:*:*:*:*:* (Version >= 09-51 and <= 09-51-14)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-00 and <= 08-00-06)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-01 and <= 08-01-03)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-02 and <= 08-02-04)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-10 and <= 08-10-10)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-11 and <= 08-11-06)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-50 and <= 08-50-04)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-51 and <= 08-51-14)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 09-00 and <= 09-00-13)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 09-01 and <= 09-01-12)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 09-10 and <= 09-10-13)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 09-50 and <= 09-50-19)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 09-51 and <= 09-51-08)

OR cpe:/a:hitachi:jp1/netm/dm_client-remote_control_feature:*:*:*:*:*:*:*:* (Version >= 10-10 and <= 10-10-20)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 08-51 and <= 08-51-18)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 08-52 and <= 08-52-22)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 09-00 and <= 09-00-14)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 09-01 and <= 09-01-14)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 09-10 and <= 09-10-15)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 09-12 and <= 09-12-15)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 09-50 and <= 09-50-20)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 09-51 and <= 09-51-14)

OR cpe:/a:hitachi:jp1/netm/dm_manager:*:*:*:*:*:*:*:* (Version >= 10-10 and <= 10-10-24)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-00 and <= 08-00-06)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-01 and <= 08-01-03)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-02 and <= 08-02-04)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-10 and <= 08-10-10)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-11 and <= 08-11-06)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-50 and <= 08-50-04)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 08-51 and <= 08-51-14)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 09-00 and <= 09-00-13)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 09-01 and <= 09-01-12)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 09-50 and <= 09-50-20)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 09-51 and <= 09-51-08)

OR cpe:/a:hitachi:jp1/netm/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 10-10 and <= 10-10-20)

OR cpe:/a:hitachi:jp1/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 11-00 and <= 11-00-02)

OR cpe:/a:hitachi:jp1/remote_control_feature:*:*:*:*:*:*:*:* (Version >= 12-00 and <= 12-00-011)

AND

cpe:/o:microsoft:windows:-:*:*:*:*:*:*:*

Denotes that component is vulnerable

BACK