A heap-based buffer overflow has been identified in the Manager component of Hitachi's JP1/Automatic Job Management System 3. The flaw allows an attacker to write beyond the allocated memory boundaries when processing input data, leading to arbitrary code execution or a crash. The CVSS score of 9.4 indicates a critical severity, pointing to a high likelihood of severe data confidentiality, integrity, and availability compromise if exploited.

The vulnerability affects Hitachi JP1/Automatic Job Management System 3 – Manager on all releases before 13-50-31. Systems running 10-00 up to any version prior to 13-50-31 are susceptible.

With no EPSS score available, the high CVSS rating alone signals a dangerous flaw. The vulnerability is not listed in CISA KEV yet, but the severity suggests it may become a target. The exploited condition would likely involve a remote attacker sending crafted data to the Manager service; this inference is based on the nature of heap overflows in network-facing components. Attackers could achieve full system compromise if the buffer overflow allows execution of malicious code.