CVE-2021-29645

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local…

High · published October 12, 2021

CVSS v3.1
7.0
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00221 · 12.0th percentile
Published
2021-10-12T18:30Z
EPSS history
Timeline
  • 12 OCT 18:30Z
    Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local…
    cvelistv5