Back

CVE-2024-4679

July 2, 2024, 12:09 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Hitachi JP1/Extensible SNMP Agent for Windows

  • 12-00
  • 12-00-01
  • 11-00
  • 11-00-*

Hitachi JP1/Extensible SNMP Agent

  • 10-10
  • 10-10-01
  • 10-00
  • 10-00-02
  • 09-00
  • 09-00-04

Job Management Partner1/Extensible SNMP Agent

  • 10-10
  • 10-10-01
  • 10-00
  • 10-00-02
  • 09-00
  • 09-00-04

Source

hirt@hitachi.co.jp

Tags

CWE-276
hirt@hitachi.co.jp
2024-07-02
CVE-2024-4679

CVE-2024-4679 details

Published : July 2, 2024, 2:15 a.m.
Last Modified : July 2, 2024, 12:09 p.m.

Description

Incorrect Default Permissions vulnerability in Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNMP Agent on Windows, Hitachi Job Management Partner1/Extensible SNMP Agent on Windows allows File Manipulation.This issue affects JP1/Extensible SNMP Agent for Windows: from 12-00 before 12-00-01, from 11-00 through 11-00-*; JP1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04; Job Management Partner1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04.

CVSS Score

1 2 3 4 5 6 7.8 8 9 10

Weakness

Weakness Name Description
CWE-276 Incorrect Default Permissions During installation, installed file permissions are set to allow anyone to modify those files.

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

7.8

Exploitability Score

1.8

Impact Score

5.9

Base Severity

HIGH

Vector String : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL Source
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-127/index.html hirt@hitachi.co.jp
This website uses the NVD API, but is not approved or certified by it.