Buffer overflow vulnerability resides in the Windows versions of JP1/IT Desktop Management 2 Manager and Operations Director, as well as related JP1/NETM/DM Manager and Client components. This flaw allows an attacker, given suitable input, to exceed expected buffer limits, potentially leading to memory corruption. The impact of such corruption could include arbitrary code execution or denial of service, though the exact consequences depend on the exploited context. The weakness is classified as a buffer overflow (CWE‑763).

Affected systems encompass several Hitachi product families: JP1/IT Desktop Management 2 Manager and Operations Director, JP1/IT Desktop Management (legacy) Manager, Job Management Partner 1/IT Desktop Management 2 Manager, Job Management Partner 1/IT Desktop Management Manager, JP1/NETM/DM Manager and Client, and Job Management Partner 1 Software Distribution Manager and Client. The issue affects Windows versions prior to the specified patch levels: for JP1/IT Desktop Management 2 Manager, versions 13‑50, 13‑11, 13‑10, 13‑01, 13‑00, 12‑60, and all releases 10‑50 through 12‑50‑11; for JP1/IT Desktop Management 2 Operations Director, the same set of pre‑patch releases; for Job Management Partner 1/IT Desktop Management 2 Manager, releases 10‑50 through 10‑50‑11; for JP1/IT Desktop Management Manager and Job Management Partner 1/IT Desktop Management Manager, releases 09‑50 through 10‑10‑16; for JP1/NETM/DM components, releases 09‑00 through 10‑20‑02; and for Job Management Partner 1 Software Distribution components, releases 09‑00 through 09‑51‑13.

The CVSS score of 5.5 indicates a medium severity impact. The EPSS score of < 1% reflects a very low exploitation probability, and the vulnerability is not listed in the KEV catalog, suggesting no widespread exploitation has been reported. Based on the description, the likely attack vector is local misuse of privileged input to the affected Windows services, though remote exploitation cannot be ruled out. An attacker who successfully triggers the overflow could cause program crashes or potentially gain code execution, depending on the environment and privilege level.