Impact
Stack-based buffer overflow exists in JP1/Automatic Job Management System 3, allowing an attacker to overwrite memory on the stack and execute arbitrary code. This vulnerability can compromise the confidentiality, integrity, and availability of the affected system by allowing full control over the Manager or Agent processes.
Affected Systems
Hitachi JP1/Automatic Job Management System 3 – Manager versions prior to 13‑50‑31 and JP1/Automatic Job Management System 3 – Agent (including the Minimal Edition) versions prior to 13‑50‑31 are vulnerable. Any instance running those releases is at risk.
Risk and Exploitability
The CVSS score of 9.8 classifies this as a critical vulnerability. EPSS data is not available, so the current exploitation probability is unknown; the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is remote, requiring network access to the Manager or Agent services, and may need authenticated or authorized access to send malformed data that triggers the overflow.
OpenCVE Enrichment