Heimdall Security Logo

CVE-2025-65115

Vulnérabilité élevée dans JP1/IT Desktop Management 2 - Manager (Hitachi)

CVSS 8.8 · Élevée
EPSS 0.6%
Hitachi•JP1/IT Desktop Management 2 - Manager•Versions : 13-50, <=09-51-13, 09-50, <13-50-02, 10-50, <13-10-07, 13-00, <=10-20-02, 13-11, 13-01, <=10-10-16, <=10-50-11, <13-00-05, 09-00, 12-60, <13-01-07, 13-10, <12-60-12, <13-11-04, <=12-50-11

Description

Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13.

Gravité et risque d'exploitation

CVE-2025-65115 obtient un score CVSS de 8.8/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.61 %, ce qui la place devant 48.4 % des CVE référencées.

Que faire ?

  • Vérifiez si JP1/IT Desktop Management 2 - Manager (versions 13-50, <=09-51-13, 09-50, <13-50-02, 10-50, <13-10-07, 13-00, <=10-20-02, 13-11, 13-01, <=10-10-16, <=10-50-11, <13-00-05, 09-00, 12-60, <13-01-07, 13-10, <12-60-12, <13-11-04, <=12-50-11) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE