TI-2022-15677 Aliases CVE-2022-34881 GHSA-9fg5-x4r6-5p4p

Information Exposure Vulnerability in JP1/Automatic Operation

LOW 15CWE-209Published 2022-12-06 · Updated 2025-04-23

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-209.

Summary

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows local users to gain sensitive information. This issue affects JP1/Automatic Operation: from 10-00 through 10-54-03, from 11-00 before 11-51-09, from 12-00 before 12-60-01.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0017 6th percentileScored 2026-11-07

Fix Fixed JP1/Automatic Operation (Hitachi): 11-51-09, 12-60-01

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hitachi	JP1/Automatic Operation	10-00 – 10-54-03; 11-00 to before 11-51-09; 12-00 to before 12-60-01	11-51-09, 12-60-01	Patch available	CNA
Hitachi	JP1/Automatic Operation	10-52 – 10-54-03; 11-00 to before 11-51-09; 12-00 to before 12-60-01	11-51-09, 12-60-01	Patch available	CNA

JP1/Automatic Operation VendorHitachi Affected 10-00 – 10-54-03; 11-00 to before 11-51-09; 12-00 to before 12-60-01 Fixed in 11-51-09, 12-60-01 Patch available CNA
JP1/Automatic Operation VendorHitachi Affected 10-52 – 10-54-03; 11-00 to before 11-51-09; 12-00 to before 12-60-01 Fixed in 11-51-09, 12-60-01 Patch available CNA

CPE configurations NVD · 11

CPE	Versions	Role	Vendor
cpe:2.3:a:hitachi:jp1\/automatic_operation::::::::	10-00 – 10-00-02; 10-10 – 10-10-01; 10-12 – 10-12-05; 10-13 – 10-13-04; 10-52 – 10-52-05; 10-53 – 10-53-03; 10-54 – 10-54-03; 11-00 – 11-00-05; 11-01 – 11-01-03; 11-02 – 11-02-01; 11-10 – 11-10-07; 11-11 – 11-11-05; 11-12 – 11-12-04; 11-51 – 11-51-08; 12-00 – 12-00-01; 12-01 – 12-01-02; 12-10 – 12-10-02; 12-50 – 12-50-01	Vulnerable	Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-01:::::::*	10-01	Vulnerable	Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-02:::::::*	10-02	Vulnerable	Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-11:::::::*	10-11	Vulnerable	Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-50:::::::*	10-50	Vulnerable	Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-51:::::::*	10-51	Vulnerable	Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:11-50:::::::*	11-50	Vulnerable	Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:12-60:::::::*	12-60	Vulnerable	Hitachi
cpe:2.3:o:microsoft:windows:-:::::::*	not specified by NVD	Running on	Microsoft
cpe:2.3:a:hitachi:jp1\/automatic_operation::::::::	11-10 – 11-10-06; 11-11 – 11-11-04; 11-12 – 11-12-03	Vulnerable	Hitachi

cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:* Versions 10-00 – 10-00-02; 10-10 – 10-10-01; 10-12 – 10-12-05; 10-13 – 10-13-04; 10-52 – 10-52-05; 10-53 – 10-53-03; 10-54 – 10-54-03; 11-00 – 11-00-05; 11-01 – 11-01-03; 11-02 – 11-02-01; 11-10 – 11-10-07; 11-11 – 11-11-05; 11-12 – 11-12-04; 11-51 – 11-51-08; 12-00 – 12-00-01; 12-01 – 12-01-02; 12-10 – 12-10-02; 12-50 – 12-50-01 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-01:*:*:*:*:*:*:* Versions 10-01 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-02:*:*:*:*:*:*:* Versions 10-02 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-11:*:*:*:*:*:*:* Versions 10-11 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-50:*:*:*:*:*:*:* Versions 10-50 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:10-51:*:*:*:*:*:*:* Versions 10-51 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:11-50:*:*:*:*:*:*:* Versions 11-50 Vulnerable ·Hitachi
cpe:2.3:a:hitachi:jp1\/automatic_operation:12-60:*:*:*:*:*:*:* Versions 12-60 Vulnerable ·Hitachi
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
cpe:2.3:a:hitachi:jp1\/automatic_operation:*:*:*:*:*:*:*:* Versions 11-10 – 11-10-06; 11-11 – 11-11-04; 11-12 – 11-12-03 Vulnerable ·Hitachi

Show 1 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:linux:linux_kernel:-:::::::*	not specified by NVD	Running on	Linux

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux

Remediation

Fix · CNA JP1/Automatic Operation (Hitachi) Fixed in 11-51-09, 12-60-01
Fix · CNA JP1/Automatic Operation (Hitachi) Fixed in 11-51-09, 12-60-01

Timeline

2026-10-02 Threatist record created from CVE-2022-34881
2026-10-03 Alias added: GHSA-9fg5-x4r6-5p4p

References

Advisory 1

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-140/index.html

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences