[Japanese] | |
JVNDB-2013-004409 | |
Arbitrary Commands Execution Vulnerability in JP1/Automatic Job Management System 3 and JP1/Automatic Job Management System 2 | |
Overview | |
The JP1/Automatic Job Management System 3 and JP1/Automatic Job Management System 2 contain a vulnerability where arbitrary commands may be executed when they receive request messages from unexpected hosts in the network. | |
CVSS Severity (What is CVSS?) | |
CVSS V2 Severity:
Base Metrics 8.3 (High) [Vendor Score]
| |
Affected Products | |
| |
Hitachi, Ltd | |
Please refer to HS13-023 provided by Hitachi for more details. | |
Impact | |
Malicious users can exploit this vulnerability to execute arbitrary commands by sending request messages from an unexpected host. | |
Solution | |
Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action. | |
Vendor Information | |
Hitachi, Ltd | |
CWE (What is CWE?) | |
| |
CVE (What is CVE?) | |
| |
References | |
| |
Revision History | |
|
Date Public | 2013/09/30 |
Date First Published | 2013/10/03 |
Date Last Updated | 2013/10/03 |