Read the docs
TI-2021-10345 Aliases CVE-2021-29645GHSA-4v64-3g6p-jfw6

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API…

Priority LOW 33Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.

Why it matters now

EPSS 0.00221 12th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 15

CPEVersionsRoleVendor
cpe:2.3:a:hitachi:it_operations_director:*:*:*:*:*:*:*:*02-50 – 02-50-07; 03-00 – 03-00-12; 04-00 – 04-00-17; 04-50 – 04-50-16VulnerableHitachi
cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management-manager:*:*:*:*:*:*:*:*09-50 – 09-50-03; 10-01 – 10-01-06; 10-10 – 10-10-16VulnerableHitachi
cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*10-50 – 10-50-11VulnerableHitachi
cpe:2.3:a:hitachi:job_management_partner_1\/remote_control_agent:*:*:*:*:*:*:*:*08-00 – 08-00-04; 08-10 – 08-10-05; 08-51 – 08-51-18; 09-00 – 09-00-07; 09-50 – 09-50-09; 09-51 – 09-51-15VulnerableHitachi
cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_client:*:*:*:*:*:*:*:*08-00 – 08-00-05; 08-10 – 08-10-06; 08-51 – 08-51-19; 09-00 – 09-00-09; 09-50 – 09-50-09; 09-51 – 09-51-13VulnerableHitachi
cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_manager:*:*:*:*:*:*:*:*08-00 – 08-00-07; 08-10 – 08-10-06; 08-51 – 08-51-19; 09-00 – 09-00-09; 09-50 – 09-50-09; 09-51 – 09-51-13VulnerableHitachi
cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:*:*:*:*:*:*:*:*09-50 – 09-50-03; 09-51 – 09-51-05; 10-00 – 10-00-02; 10-01 – 10-01-05; 10-02 – 10-02-05; 10-10 – 10-10-16VulnerableHitachi
cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:*10-50 – 10-50-12; 11-00 – 11-00-11; 11-01 – 11-01-12; 11-10 – 11-10-10; 11-50 – 11-50-08; 11-51 – 11-51-10; 12-00 – 12-00-09; 12-10 – 12-10-07; 12-50 – 12-50-03VulnerableHitachi
cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:*11-01 – 11-01-12; 11-10 – 11-10-10; 11-50 – 11-50-08; 11-51 – 11-51-10; 12-00 – 12-00-09; 12-10 – 12-10-07; 12-50 – 12-50-03VulnerableHitachi
cpe:2.3:a:hitachi:jp1\/netm\/dm_client:*:*:*:*:*:*:*:*08-00 – 08-00-09; 08-01 – 08-01-04; 08-02 – 08-02-07; 08-10 – 08-10-13; 08-11 – 08-11-17; 08-12 – 08-12-03; 08-50 – 08-50-08; 08-51 – 08-51-17; 08-52 – 08-52-22; 09-00 – 09-00-14; 09-01 – 09-01-14; 09-10 – 09-10-15; 09-12 – 09-12-16; 09-50 – 09-50-20; 09-51 – 09-51-14; 10-10 – 10-10-23VulnerableHitachi
  • cpe:2.3:a:hitachi:it_operations_director:*:*:*:*:*:*:*:* Versions 02-50 – 02-50-07; 03-00 – 03-00-12; 04-00 – 04-00-17; 04-50 – 04-50-16 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management-manager:*:*:*:*:*:*:*:* Versions 09-50 – 09-50-03; 10-01 – 10-01-06; 10-10 – 10-10-16 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:* Versions 10-50 – 10-50-11 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:job_management_partner_1\/remote_control_agent:*:*:*:*:*:*:*:* Versions 08-00 – 08-00-04; 08-10 – 08-10-05; 08-51 – 08-51-18; 09-00 – 09-00-07; 09-50 – 09-50-09; 09-51 – 09-51-15 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_client:*:*:*:*:*:*:*:* Versions 08-00 – 08-00-05; 08-10 – 08-10-06; 08-51 – 08-51-19; 09-00 – 09-00-09; 09-50 – 09-50-09; 09-51 – 09-51-13 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:job_management_partner_1\/software_distribution_manager:*:*:*:*:*:*:*:* Versions 08-00 – 08-00-07; 08-10 – 08-10-06; 08-51 – 08-51-19; 09-00 – 09-00-09; 09-50 – 09-50-09; 09-51 – 09-51-13 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:*:*:*:*:*:*:*:* Versions 09-50 – 09-50-03; 09-51 – 09-51-05; 10-00 – 10-00-02; 10-01 – 10-01-05; 10-02 – 10-02-05; 10-10 – 10-10-16 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-manager:*:*:*:*:*:*:*:* Versions 10-50 – 10-50-12; 11-00 – 11-00-11; 11-01 – 11-01-12; 11-10 – 11-10-10; 11-50 – 11-50-08; 11-51 – 11-51-10; 12-00 – 12-00-09; 12-10 – 12-10-07; 12-50 – 12-50-03 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:jp1\/it_desktop_management_2-operations_director:*:*:*:*:*:*:*:* Versions 11-01 – 11-01-12; 11-10 – 11-10-10; 11-50 – 11-50-08; 11-51 – 11-51-10; 12-00 – 12-00-09; 12-10 – 12-10-07; 12-50 – 12-50-03 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:jp1\/netm\/dm_client:*:*:*:*:*:*:*:* Versions 08-00 – 08-00-09; 08-01 – 08-01-04; 08-02 – 08-02-07; 08-10 – 08-10-13; 08-11 – 08-11-17; 08-12 – 08-12-03; 08-50 – 08-50-08; 08-51 – 08-51-17; 08-52 – 08-52-22; 09-00 – 09-00-14; 09-01 – 09-01-14; 09-10 – 09-10-15; 09-12 – 09-12-16; 09-50 – 09-50-20; 09-51 – 09-51-14; 10-10 – 10-10-23 Vulnerable ·Hitachi
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:hitachi:jp1\/netm\/dm_client-remote_control_feature:*:*:*:*:*:*:*:*08-00 – 08-00-06; 08-01 – 08-01-03; 08-02 – 08-02-04; 08-10 – 08-10-10; 08-11 – 08-11-06; 08-50 – 08-50-04; 08-51 – 08-51-14; 09-00 – 09-00-13; 09-01 – 09-01-12; 09-10 – 09-10-13; 09-50 – 09-50-19; 09-51 – 09-51-08; 10-10 – 10-10-20VulnerableHitachi
cpe:2.3:a:hitachi:jp1\/netm\/dm_manager:*:*:*:*:*:*:*:*08-00 – 08-00-09; 08-02 – 08-02-07; 08-10 – 08-10-13; 08-11 – 08-11-17; 08-50 – 08-50-08; 08-51 – 08-51-18; 08-52 – 08-52-22; 09-00 – 09-00-14; 09-01 – 09-01-14; 09-10 – 09-10-15; 09-12 – 09-12-15; 09-50 – 09-50-20; 09-51 – 09-51-14; 10-10 – 10-10-24VulnerableHitachi
cpe:2.3:a:hitachi:jp1\/netm\/remote_control_feature:*:*:*:*:*:*:*:*08-00 – 08-00-06; 08-01 – 08-01-03; 08-02 – 08-02-04; 08-10 – 08-10-10; 08-11 – 08-11-06; 08-50 – 08-50-04; 08-51 – 08-51-14; 09-00 – 09-00-13; 09-01 – 09-01-12; 09-50 – 09-50-20; 09-51 – 09-51-08; 10-10 – 10-10-20VulnerableHitachi
cpe:2.3:a:hitachi:jp1\/remote_control_feature:*:*:*:*:*:*:*:*11-00 – 11-00-02; 12-00 – 12-00-011VulnerableHitachi
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:hitachi:jp1\/netm\/dm_client-remote_control_feature:*:*:*:*:*:*:*:* Versions 08-00 – 08-00-06; 08-01 – 08-01-03; 08-02 – 08-02-04; 08-10 – 08-10-10; 08-11 – 08-11-06; 08-50 – 08-50-04; 08-51 – 08-51-14; 09-00 – 09-00-13; 09-01 – 09-01-12; 09-10 – 09-10-13; 09-50 – 09-50-19; 09-51 – 09-51-08; 10-10 – 10-10-20 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:jp1\/netm\/dm_manager:*:*:*:*:*:*:*:* Versions 08-00 – 08-00-09; 08-02 – 08-02-07; 08-10 – 08-10-13; 08-11 – 08-11-17; 08-50 – 08-50-08; 08-51 – 08-51-18; 08-52 – 08-52-22; 09-00 – 09-00-14; 09-01 – 09-01-14; 09-10 – 09-10-15; 09-12 – 09-12-15; 09-50 – 09-50-20; 09-51 – 09-51-14; 10-10 – 10-10-24 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:jp1\/netm\/remote_control_feature:*:*:*:*:*:*:*:* Versions 08-00 – 08-00-06; 08-01 – 08-01-03; 08-02 – 08-02-04; 08-10 – 08-10-10; 08-11 – 08-11-06; 08-50 – 08-50-04; 08-51 – 08-51-14; 09-00 – 09-00-13; 09-01 – 09-01-12; 09-50 – 09-50-20; 09-51 – 09-51-08; 10-10 – 10-10-20 Vulnerable ·Hitachi
  • cpe:2.3:a:hitachi:jp1\/remote_control_feature:*:*:*:*:*:*:*:* Versions 11-00 – 11-00-02; 12-00 – 12-00-011 Vulnerable ·Hitachi
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-29645
  2. 2026-10-03 Alias added: GHSA-4v64-3g6p-jfw6

References

Advisory 1

  • TI-2021-10344 Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution… CVSS 3.1CRITICAL 9.8
  • TI-2013-04118 Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50… CVSS 2.0HIGH 9.0
  • TI-2012-03656 Unspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07… CVSS 2.0MEDIUM 5.0
  • TI-2012-03655 Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01… CVSS 2.0MEDIUM 4.3
  • TI-2012-00845 Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences