CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-29645
High (7.8) in hitachi. EPSS 0.2% chance of exploitation in the next 30 days.
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hitachi:it_operations_director
- hitachi:job_management_partner_1\/it_desktop_management-manager
- hitachi:job_management_partner_1\/it_desktop_management_2-manager
- hitachi:job_management_partner_1\/remote_control_agent
- hitachi:job_management_partner_1\/software_distribution_client
- hitachi:job_management_partner_1\/software_distribution_manager
- hitachi:jp1\/it_desktop_management-manager
- hitachi:jp1\/it_desktop_management_2-manager
- hitachi:jp1\/it_desktop_management_2-operations_director
- hitachi:jp1\/netm\/dm_client
- hitachi:jp1\/netm\/dm_client-remote_control_feature
- hitachi:jp1\/netm\/dm_manager
- hitachi:jp1\/netm\/remote_control_feature
- hitachi:jp1\/remote_control_feature