ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2025-65115

Hitachi JP1/IT Desktop Management - ManagerHitachi JP1/IT Desktop Management 2 - ManagerHitachi JP1/IT Desktop Management 2 - Operations DirectorHitachi JP1/NETM/DM ClientHitachi JP1/NETM/DM ManagerHitachi Job Management Partner 1/IT Desktop Management - Manager

Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM

CVSS 3.1
8.8بالا

شرح رسمی (انگلیسی)

Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13.

امتیازهای CVSS

امتیازنسخهمنبعبردار
8.8بالا 3.1 CVEProject cvelistV5 (CNA) (Hitachi) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Hitachi JP1/IT Desktop Management - Manager 09-50 ≤ v ≤ 10-10-16 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Manager 10-50 ≤ v ≤ 12-50-11 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Manager 12-60 ≤ v < 12-60-12 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Manager 13-00 ≤ v < 13-00-05 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Manager 13-01 ≤ v < 13-01-07 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Manager 13-10 ≤ v < 13-10-07 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Manager 13-11 ≤ v < 13-11-04 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Manager 13-50 ≤ v < 13-50-02 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Operations Director 10-50 ≤ v ≤ 12-50-11 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Operations Director 12-60 ≤ v < 12-60-12 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Operations Director 13-00 ≤ v < 13-00-05 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Operations Director 13-01 ≤ v < 13-01-07 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Operations Director 13-10 ≤ v < 13-10-07 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Operations Director 13-11 ≤ v < 13-11-04 CVEProject cvelistV5 (CNA)
Hitachi JP1/IT Desktop Management 2 - Operations Director 13-50 ≤ v < 13-50-02 CVEProject cvelistV5 (CNA)
Hitachi JP1/NETM/DM Client 09-00 ≤ v ≤ 10-20-02 CVEProject cvelistV5 (CNA)
Hitachi JP1/NETM/DM Manager 09-00 ≤ v ≤ 10-20-02 CVEProject cvelistV5 (CNA)
Hitachi Job Management Partner 1/IT Desktop Management - Manager 09-50 ≤ v ≤ 10-10-16 CVEProject cvelistV5 (CNA)
Hitachi Job Management Partner 1/IT Desktop Management 2 - Manager 10-50 ≤ v ≤ 10-50-11 CVEProject cvelistV5 (CNA)
Hitachi Job Management Partner 1/Software Distribution Client 09-00 ≤ v ≤ 09-51-13 CVEProject cvelistV5 (CNA)
Hitachi Job Management Partner 1/Software Distribution Manager 09-00 ≤ v ≤ 09-51-13 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۱/۱۸
آخرین به‌روزرسانی
۱۴۰۵/۰۱/۱۸
وضعیت
منتشرشده
صادرکننده (CNA)
Hitachi

پیش‌بینی بهره‌برداری (EPSS)

۰٫۶۲٪
احتمال بهره‌برداری در ۳۰ روز
۵۰٫۱٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-73
    External control of file name or path