JVN#94347255: JP1/Extensible SNMP Agent fails to restrict access permissions

JP1/Extensible SNMP Agent provided by Hitachi fails to restrict access permissions (CWE-276).

Impact

If an authenticated attacker who can log in to the product places a specially crafted DLL file in a specific directory, arbitrary code may be executed with the administrative privilege.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.

Products Affected

• JP1/Extensible SNMP Agent for Windows 11-00, 12-00
• JP1/Extensible SNMP Agent 09-00 to 09-00-04, 10-00 to 10-00-02, and 10-10 to 10-10-01
• Job Management Partner1/Extensible SNMP Agent 09-00 to 09-00-04, 10-00 to 10-00-02, and 10-10 to 10-10-01