| Package | Affected versions | Patched versions |
|---|---|---|
| it operations director | ≥ 02-50, ≤ 02-50-07≥ 03-00, ≤ 03-00-12≥ 04-00, ≤ 04-00-17≥ 04-50, ≤ 04-50-16 | |
| job management partner 1/it desktop management-manager | ≥ 09-50, ≤ 09-50-03≥ 10-01, ≤ 10-01-06≥ 10-10, ≤ 10-10-16 | |
| job management partner 1/it desktop management 2-manager | ≥ 10-50, ≤ 10-50-11 | |
| job management partner 1/remote control agent | ≥ 08-00, ≤ 08-00-04≥ 08-10, ≤ 08-10-05≥ 08-51, ≤ 08-51-18≥ 09-00, ≤ 09-00-07≥ 09-50, ≤ 09-50-09≥ 09-51, ≤ 09-51-15 | |
| job management partner 1/software distribution client | ≥ 08-00, ≤ 08-00-05≥ 08-10, ≤ 08-10-06≥ 08-51, ≤ 08-51-19≥ 09-00, ≤ 09-00-09≥ 09-50, ≤ 09-50-09≥ 09-51, ≤ 09-51-13 | |
| job management partner 1/software distribution manager | ≥ 08-00, ≤ 08-00-07≥ 08-10, ≤ 08-10-06≥ 08-51, ≤ 08-51-19≥ 09-00, ≤ 09-00-09≥ 09-50, ≤ 09-50-09≥ 09-51, ≤ 09-51-13 | |
| jp1/it desktop management-manager | ≥ 09-50, ≤ 09-50-03≥ 09-51, ≤ 09-51-05≥ 10-00, ≤ 10-00-02≥ 10-01, ≤ 10-01-05≥ 10-02, ≤ 10-02-05≥ 10-10, ≤ 10-10-16 | |
| jp1/it desktop management 2-manager | ≥ 10-50, ≤ 10-50-12≥ 11-00, ≤ 11-00-11≥ 11-01, ≤ 11-01-12≥ 11-10, ≤ 11-10-10≥ 11-50, ≤ 11-50-08≥ 11-51, ≤ 11-51-10≥ 12-00, ≤ 12-00-09≥ 12-10, ≤ 12-10-07≥ 12-50, ≤ 12-50-03 | |
| jp1/it desktop management 2-operations director | ≥ 11-01, ≤ 11-01-12≥ 11-10, ≤ 11-10-10≥ 11-50, ≤ 11-50-08≥ 11-51, ≤ 11-51-10≥ 12-00, ≤ 12-00-09≥ 12-10, ≤ 12-10-07≥ 12-50, ≤ 12-50-03 | |
| jp1/netm/dm client | ≥ 08-00, ≤ 08-00-09≥ 08-01, ≤ 08-01-04≥ 08-02, ≤ 08-02-07≥ 08-10, ≤ 08-10-13≥ 08-11, ≤ 08-11-17≥ 08-12, ≤ 08-12-03≥ 08-50, ≤ 08-50-08≥ 08-51, ≤ 08-51-17≥ 08-52, ≤ 08-52-22≥ 09-00, ≤ 09-00-14≥ 09-01, ≤ 09-01-14≥ 09-10, ≤ 09-10-15≥ 09-12, ≤ 09-12-16≥ 09-50, ≤ 09-50-20≥ 09-51, ≤ 09-51-14≥ 10-10, ≤ 10-10-23 | |
| jp1/netm/dm client-remote control feature | ≥ 08-00, ≤ 08-00-06≥ 08-01, ≤ 08-01-03≥ 08-02, ≤ 08-02-04≥ 08-10, ≤ 08-10-10≥ 08-11, ≤ 08-11-06≥ 08-50, ≤ 08-50-04≥ 08-51, ≤ 08-51-14≥ 09-00, ≤ 09-00-13≥ 09-01, ≤ 09-01-12≥ 09-10, ≤ 09-10-13≥ 09-50, ≤ 09-50-19≥ 09-51, ≤ 09-51-08≥ 10-10, ≤ 10-10-20 | |
| jp1/netm/dm manager | ≥ 08-00, ≤ 08-00-09≥ 08-02, ≤ 08-02-07≥ 08-10, ≤ 08-10-13≥ 08-11, ≤ 08-11-17≥ 08-50, ≤ 08-50-08≥ 08-51, ≤ 08-51-18≥ 08-52, ≤ 08-52-22≥ 09-00, ≤ 09-00-14≥ 09-01, ≤ 09-01-14≥ 09-10, ≤ 09-10-15≥ 09-12, ≤ 09-12-15≥ 09-50, ≤ 09-50-20≥ 09-51, ≤ 09-51-14≥ 10-10, ≤ 10-10-24 | |
| jp1/netm/remote control feature | ≥ 08-00, ≤ 08-00-06≥ 08-01, ≤ 08-01-03≥ 08-02, ≤ 08-02-04≥ 08-10, ≤ 08-10-10≥ 08-11, ≤ 08-11-06≥ 08-50, ≤ 08-50-04≥ 08-51, ≤ 08-51-14≥ 09-00, ≤ 09-00-13≥ 09-01, ≤ 09-01-12≥ 09-50, ≤ 09-50-20≥ 09-51, ≤ 09-51-08≥ 10-10, ≤ 10-10-20 | |
| jp1/remote control feature | ≥ 11-00, ≤ 11-00-02≥ 12-00, ≤ 12-00-011 |
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free