Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| It_operations_director | Hitachi | 02-50 (including) | 02-50-07 (including) |
| It_operations_director | Hitachi | 03-00 (including) | 03-00-12 (including) |
| It_operations_director | Hitachi | 04-00 (including) | 04-00-17 (including) |
| It_operations_director | Hitachi | 04-50 (including) | 04-50-16 (including) |
| Job_management_partner_1/it_desktop_management-manager | Hitachi | 09-50 (including) | 09-50-03 (including) |
| Job_management_partner_1/it_desktop_management-manager | Hitachi | 10-01 (including) | 10-01-06 (including) |
| Job_management_partner_1/it_desktop_management-manager | Hitachi | 10-10 (including) | 10-10-16 (including) |
| Job_management_partner_1/it_desktop_management_2-manager | Hitachi | 10-50 (including) | 10-50-11 (including) |
| Job_management_partner_1/remote_control_agent | Hitachi | 08-00 (including) | 08-00-04 (including) |
| Job_management_partner_1/remote_control_agent | Hitachi | 08-10 (including) | 08-10-05 (including) |
| Job_management_partner_1/remote_control_agent | Hitachi | 08-51 (including) | 08-51-18 (including) |
| Job_management_partner_1/remote_control_agent | Hitachi | 09-00 (including) | 09-00-07 (including) |
| Job_management_partner_1/remote_control_agent | Hitachi | 09-50 (including) | 09-50-09 (including) |
| Job_management_partner_1/remote_control_agent | Hitachi | 09-51 (including) | 09-51-15 (including) |
| Job_management_partner_1/software_distribution_client | Hitachi | 08-00 (including) | 08-00-05 (including) |
| Job_management_partner_1/software_distribution_client | Hitachi | 08-10 (including) | 08-10-06 (including) |
| Job_management_partner_1/software_distribution_client | Hitachi | 08-51 (including) | 08-51-19 (including) |
| Job_management_partner_1/software_distribution_client | Hitachi | 09-00 (including) | 09-00-09 (including) |
| Job_management_partner_1/software_distribution_client | Hitachi | 09-50 (including) | 09-50-09 (including) |
| Job_management_partner_1/software_distribution_client | Hitachi | 09-51 (including) | 09-51-13 (including) |
| Job_management_partner_1/software_distribution_manager | Hitachi | 08-00 (including) | 08-00-07 (including) |
| Job_management_partner_1/software_distribution_manager | Hitachi | 08-10 (including) | 08-10-06 (including) |
| Job_management_partner_1/software_distribution_manager | Hitachi | 08-51 (including) | 08-51-19 (including) |
| Job_management_partner_1/software_distribution_manager | Hitachi | 09-00 (including) | 09-00-09 (including) |
| Job_management_partner_1/software_distribution_manager | Hitachi | 09-50 (including) | 09-50-09 (including) |
| Job_management_partner_1/software_distribution_manager | Hitachi | 09-51 (including) | 09-51-13 (including) |
| Jp1/it_desktop_management-manager | Hitachi | 09-50 (including) | 09-50-03 (including) |
| Jp1/it_desktop_management-manager | Hitachi | 09-51 (including) | 09-51-05 (including) |
| Jp1/it_desktop_management-manager | Hitachi | 10-00 (including) | 10-00-02 (including) |
| Jp1/it_desktop_management-manager | Hitachi | 10-01 (including) | 10-01-05 (including) |
| Jp1/it_desktop_management-manager | Hitachi | 10-02 (including) | 10-02-05 (including) |
| Jp1/it_desktop_management-manager | Hitachi | 10-10 (including) | 10-10-16 (including) |
| Jp1/it_desktop_management_2-manager | Hitachi | 10-50 (including) | 10-50-12 (including) |
| Jp1/it_desktop_management_2-manager | Hitachi | 11-00 (including) | 11-00-11 (including) |
| Jp1/it_desktop_management_2-manager | Hitachi | 11-01 (including) | 11-01-12 (including) |
| Jp1/it_desktop_management_2-manager | Hitachi | 11-10 (including) | 11-10-10 (including) |
| Jp1/it_desktop_management_2-manager | Hitachi | 11-50 (including) | 11-50-08 (including) |
| Jp1/it_desktop_management_2-manager | Hitachi | 11-51 (including) | 11-51-10 (including) |
| Jp1/it_desktop_management_2-manager | Hitachi | 12-00 (including) | 12-00-09 (including) |
| Jp1/it_desktop_management_2-manager | Hitachi | 12-10 (including) | 12-10-07 (including) |
| Jp1/it_desktop_management_2-manager | Hitachi | 12-50 (including) | 12-50-03 (including) |
| Jp1/it_desktop_management_2-operations_director | Hitachi | 11-01 (including) | 11-01-12 (including) |
| Jp1/it_desktop_management_2-operations_director | Hitachi | 11-10 (including) | 11-10-10 (including) |
| Jp1/it_desktop_management_2-operations_director | Hitachi | 11-50 (including) | 11-50-08 (including) |
| Jp1/it_desktop_management_2-operations_director | Hitachi | 11-51 (including) | 11-51-10 (including) |
| Jp1/it_desktop_management_2-operations_director | Hitachi | 12-00 (including) | 12-00-09 (including) |
| Jp1/it_desktop_management_2-operations_director | Hitachi | 12-10 (including) | 12-10-07 (including) |
| Jp1/it_desktop_management_2-operations_director | Hitachi | 12-50 (including) | 12-50-03 (including) |
| Jp1/netm/dm_client | Hitachi | 08-00 (including) | 08-00-09 (including) |
| Jp1/netm/dm_client | Hitachi | 08-01 (including) | 08-01-04 (including) |
| Jp1/netm/dm_client | Hitachi | 08-02 (including) | 08-02-07 (including) |
| Jp1/netm/dm_client | Hitachi | 08-10 (including) | 08-10-13 (including) |
| Jp1/netm/dm_client | Hitachi | 08-11 (including) | 08-11-17 (including) |
| Jp1/netm/dm_client | Hitachi | 08-12 (including) | 08-12-03 (including) |
| Jp1/netm/dm_client | Hitachi | 08-50 (including) | 08-50-08 (including) |
| Jp1/netm/dm_client | Hitachi | 08-51 (including) | 08-51-17 (including) |
| Jp1/netm/dm_client | Hitachi | 08-52 (including) | 08-52-22 (including) |
| Jp1/netm/dm_client | Hitachi | 09-00 (including) | 09-00-14 (including) |
| Jp1/netm/dm_client | Hitachi | 09-01 (including) | 09-01-14 (including) |
| Jp1/netm/dm_client | Hitachi | 09-10 (including) | 09-10-15 (including) |
| Jp1/netm/dm_client | Hitachi | 09-12 (including) | 09-12-16 (including) |
| Jp1/netm/dm_client | Hitachi | 09-50 (including) | 09-50-20 (including) |
| Jp1/netm/dm_client | Hitachi | 09-51 (including) | 09-51-14 (including) |
| Jp1/netm/dm_client | Hitachi | 10-10 (including) | 10-10-23 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 08-00 (including) | 08-00-06 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 08-01 (including) | 08-01-03 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 08-02 (including) | 08-02-04 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 08-10 (including) | 08-10-10 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 08-11 (including) | 08-11-06 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 08-50 (including) | 08-50-04 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 08-51 (including) | 08-51-14 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 09-00 (including) | 09-00-13 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 09-01 (including) | 09-01-12 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 09-10 (including) | 09-10-13 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 09-50 (including) | 09-50-19 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 09-51 (including) | 09-51-08 (including) |
| Jp1/netm/dm_client-remote_control_feature | Hitachi | 10-10 (including) | 10-10-20 (including) |
| Jp1/netm/dm_manager | Hitachi | 08-00 (including) | 08-00-09 (including) |
| Jp1/netm/dm_manager | Hitachi | 08-02 (including) | 08-02-07 (including) |
| Jp1/netm/dm_manager | Hitachi | 08-10 (including) | 08-10-13 (including) |
| Jp1/netm/dm_manager | Hitachi | 08-11 (including) | 08-11-17 (including) |
| Jp1/netm/dm_manager | Hitachi | 08-50 (including) | 08-50-08 (including) |
| Jp1/netm/dm_manager | Hitachi | 08-51 (including) | 08-51-18 (including) |
| Jp1/netm/dm_manager | Hitachi | 08-52 (including) | 08-52-22 (including) |
| Jp1/netm/dm_manager | Hitachi | 09-00 (including) | 09-00-14 (including) |
| Jp1/netm/dm_manager | Hitachi | 09-01 (including) | 09-01-14 (including) |
| Jp1/netm/dm_manager | Hitachi | 09-10 (including) | 09-10-15 (including) |
| Jp1/netm/dm_manager | Hitachi | 09-12 (including) | 09-12-15 (including) |
| Jp1/netm/dm_manager | Hitachi | 09-50 (including) | 09-50-20 (including) |
| Jp1/netm/dm_manager | Hitachi | 09-51 (including) | 09-51-14 (including) |
| Jp1/netm/dm_manager | Hitachi | 10-10 (including) | 10-10-24 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 08-00 (including) | 08-00-06 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 08-01 (including) | 08-01-03 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 08-02 (including) | 08-02-04 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 08-10 (including) | 08-10-10 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 08-11 (including) | 08-11-06 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 08-50 (including) | 08-50-04 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 08-51 (including) | 08-51-14 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 09-00 (including) | 09-00-13 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 09-01 (including) | 09-01-12 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 09-50 (including) | 09-50-20 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 09-51 (including) | 09-51-08 (including) |
| Jp1/netm/remote_control_feature | Hitachi | 10-10 (including) | 10-10-20 (including) |
| Jp1/remote_control_feature | Hitachi | 11-00 (including) | 11-00-02 (including) |
| Jp1/remote_control_feature | Hitachi | 12-00 (including) | 12-00-011 (including) |