The vulnerability is a stack-based buffer overflow in the HiRDB Server software. When a specially crafted input reaches the server, the overflow can corrupt the call stack and allow an attacker to execute arbitrary code on the affected host. The weakness is classified as CWE-121. Given the high CVSS score of 9.4, the impact is severe, with potential loss of confidentiality, integrity, and availability if exploited.

The vulnerability affects Hitachi HiRDB Server Version 10 from 10-00 to before 10-12-01, Version 9 from 09-00 through 09-66-22, HiRDB Server with Additional Function Version 9 from 09-00 through 09-66/V, Version 9(32) from 09-02 through 09-66-22, and HiRDB Server with Additional Function Version 9(32) from 09-00 through 09-66-/V.

With a CVSS base score of 9.4, this flaw represents a critical risk. The EPSS score is not available, but the absence of a KEV listing does not diminish the likelihood that the exploitation could occur, especially against exposed instances. The probable attack vector is remote, inferred from the service nature of the database server. The lack of an immediate fix means that any unauthenticated user capable of sending malicious payloads can trigger code execution, making prompt remediation essential.