Impact
Stack-based buffer overflow allows attackers to overwrite control data on the stack, potentially executing arbitrary code with the privileges of the process. This flaw falls under CWE‑121 and can lead to unauthorized code execution, confidentiality, integrity, or availability compromise. It may affect any system running the vulnerable JP1 components.
Affected Systems
Affected vendors include Hitachi JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 - Manager, JP1/Automatic Job Management System 3 - Agent, JP1/Automatic Job Management System 3 - Agent Minimal Edition, and JP1/Base. Versions prior to 13‑50‑31 of the first four products, and prior to 12‑50‑54 of JP1/Base, are vulnerable.
Risk and Exploitability
The CVSS score is 9.4, indicating critical severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. The attack vector is not explicitly stated; it is inferred that external exploitation could be possible if the affected services are exposed to an untrusted environment, or local exploitation if a privileged user can trigger the overflow. No official patch or workaround was provided in the advisory.
OpenCVE Enrichment