Privilege escalation

2021-10-1219:15:00

PRIOn knowledge base

www.prio-n.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.

CPENameOperatorVersion
it_operations_directoreq>= 250 AND <= 2507
it_operations_directoreq>= 30 AND <= 3012
it_operations_directoreq>= 40 AND <= 4017
it_operations_directoreq>= 450 AND <= 45016
job_management_partner_1\\/it_desktop_management-managereq>= 950 AND <= 9503
job_management_partner_1\\/it_desktop_management-managereq>= 101 AND <= 1016
job_management_partner_1\\/it_desktop_management-managereq>= 1010 AND <= 101016
job_management_partner_1\\/it_desktop_management_2-managereq>= 1050 AND <= 105011
job_management_partner_1\\/remote_control_agenteq>= 80 AND <= 804
job_management_partner_1\\/remote_control_agenteq>= 810 AND <= 8105

Name	Operator	Version
it_operations_director	eq	>= 250 AND <= 2507
it_operations_director	eq	>= 30 AND <= 3012
it_operations_director	eq	>= 40 AND <= 4017
it_operations_director	eq	>= 450 AND <= 45016
job_management_partner_1\\/it_desktop_management-manager	eq	>= 950 AND <= 9503
job_management_partner_1\\/it_desktop_management-manager	eq	>= 101 AND <= 1016
job_management_partner_1\\/it_desktop_management-manager	eq	>= 1010 AND <= 101016
job_management_partner_1\\/it_desktop_management_2-manager	eq	>= 1050 AND <= 105011
job_management_partner_1\\/remote_control_agent	eq	>= 80 AND <= 804
job_management_partner_1\\/remote_control_agent	eq	>= 810 AND <= 8105

Rows per page:

1-10 of 1051

References

www.hitachi.com/hirt/security/index.html

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for PRION:CVE-2021-29645