CVEvulnerability

CVE-2021-29645

7.8 HIGH Published 2021-10-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-10-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.

Affected configurations

• hitachi it operations director (>= 02-50 <= 02-50-07) • hitachi it operations director (>= 03-00 <= 03-00-12) • hitachi it operations director (>= 04-00 <= 04-00-17) • hitachi it operations director (>= 04-50 <= 04-50-16) • hitachi job management partner 1\/it desktop management-manager (>= 09-50 <= 09-50-03) • hitachi job management partner 1\/it desktop management-manager (>= 10-01 <= 10-01-06) • hitachi job management partner 1\/it desktop management-manager (>= 10-10 <= 10-10-16) • hitachi job management partner 1\/it desktop management 2-manager (>= 10-50 <= 10-50-11) • hitachi job management partner 1\/remote control agent (>= 08-00 <= 08-00-04) • hitachi job management partner 1\/remote control agent (>= 08-10 <= 08-10-05) • hitachi job management partner 1\/remote control agent (>= 08-51 <= 08-51-18) • hitachi job management partner 1\/remote control agent (>= 09-00 <= 09-00-07) • hitachi job management partner 1\/remote control agent (>= 09-50 <= 09-50-09) • hitachi job management partner 1\/remote control agent (>= 09-51 <= 09-51-15) • hitachi job management partner 1\/software distribution client (>= 08-00 <= 08-00-05) • hitachi job management partner 1\/software distribution client (>= 08-10 <= 08-10-06) • hitachi job management partner 1\/software distribution client (>= 08-51 <= 08-51-19) • hitachi job management partner 1\/software distribution client (>= 09-00 <= 09-00-09) • hitachi job management partner 1\/software distribution client (>= 09-50 <= 09-50-09) • hitachi job management partner 1\/software distribution client (>= 09-51 <= 09-51-13) • hitachi job management partner 1\/software distribution manager (>= 08-00 <= 08-00-07) • hitachi job management partner 1\/software distribution manager (>= 08-10 <= 08-10-06) • hitachi job management partner 1\/software distribution manager (>= 08-51 <= 08-51-19) • hitachi job management partner 1\/software distribution manager (>= 09-00 <= 09-00-09) • hitachi job management partner 1\/software distribution manager (>= 09-50 <= 09-50-09) • hitachi job management partner 1\/software distribution manager (>= 09-51 <= 09-51-13) • hitachi jp1\/it desktop management-manager (>= 09-50 <= 09-50-03) • hitachi jp1\/it desktop management-manager (>= 09-51 <= 09-51-05) • hitachi jp1\/it desktop management-manager (>= 10-00 <= 10-00-02) • hitachi jp1\/it desktop management-manager (>= 10-01 <= 10-01-05) • hitachi jp1\/it desktop management-manager (>= 10-02 <= 10-02-05) • hitachi jp1\/it desktop management-manager (>= 10-10 <= 10-10-16) • hitachi jp1\/it desktop management 2-manager (>= 10-50 <= 10-50-12) • hitachi jp1\/it desktop management 2-manager (>= 11-00 <= 11-00-11) • hitachi jp1\/it desktop management 2-manager (>= 11-01 <= 11-01-12) • hitachi jp1\/it desktop management 2-manager (>= 11-10 <= 11-10-10) • hitachi jp1\/it desktop management 2-manager (>= 11-50 <= 11-50-08) • hitachi jp1\/it desktop management 2-manager (>= 11-51 <= 11-51-10) • hitachi jp1\/it desktop management 2-manager (>= 12-00 <= 12-00-09) • hitachi jp1\/it desktop management 2-manager (>= 12-10 <= 12-10-07) • hitachi jp1\/it desktop management 2-manager (>= 12-50 <= 12-50-03) • hitachi jp1\/it desktop management 2-operations director (>= 11-01 <= 11-01-12) • hitachi jp1\/it desktop management 2-operations director (>= 11-10 <= 11-10-10) • hitachi jp1\/it desktop management 2-operations director (>= 11-50 <= 11-50-08) • hitachi jp1\/it desktop management 2-operations director (>= 11-51 <= 11-51-10) • hitachi jp1\/it desktop management 2-operations director (>= 12-00 <= 12-00-09) • hitachi jp1\/it desktop management 2-operations director (>= 12-10 <= 12-10-07) • hitachi jp1\/it desktop management 2-operations director (>= 12-50 <= 12-50-03) • hitachi jp1\/netm\/dm client (>= 08-00 <= 08-00-09) • hitachi jp1\/netm\/dm client (>= 08-01 <= 08-01-04) • hitachi jp1\/netm\/dm client (>= 08-02 <= 08-02-07) • hitachi jp1\/netm\/dm client (>= 08-10 <= 08-10-13) • hitachi jp1\/netm\/dm client (>= 08-11 <= 08-11-17) • hitachi jp1\/netm\/dm client (>= 08-12 <= 08-12-03) • hitachi jp1\/netm\/dm client (>= 08-50 <= 08-50-08) • hitachi jp1\/netm\/dm client (>= 08-51 <= 08-51-17) • hitachi jp1\/netm\/dm client (>= 08-52 <= 08-52-22) • hitachi jp1\/netm\/dm client (>= 09-00 <= 09-00-14) • hitachi jp1\/netm\/dm client (>= 09-01 <= 09-01-14) • hitachi jp1\/netm\/dm client (>= 09-10 <= 09-10-15) … and 45 more

References