CVE-2024-4679

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Incorrect Default Permissions vulnerability in Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNMP Agent on Windows, Hitachi Job Management Partner1/Extensible SNMP Agent on Windows allows File Manipulation.This issue affects JP1/Extensible SNMP Agent for Windows: from 12-00 before 12-00-01, from 11-00 through 11-00-*; JP1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04; Job Management Partner1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

VendorProductVersions
HitachiJP1/Extensible SNMP Agent for Windows>= 12-00, < 12-00-01; >= 11-00, <= 11-00-*
HitachiJP1/Extensible SNMP Agent>= 10-10, <= 10-10-01; >= 10-00, <= 10-00-02; >= 09-00, <= 09-00-04
HitachiJob Management Partner1/Extensible SNMP Agent>= 10-10, <= 10-10-01; >= 10-00, <= 10-00-02; >= 09-00, <= 09-00-04
hitachijp1\/extensible_snmp_agent>= 10-10, <= 10-10-01; >= 10-00, <= 10-00-02; >= 9-00, <= 9-00-04
hitachijob_management_partner1\/extensible_snmp_agent>= 10-10, <= 10-10-01; >= 10-00, <= 10-00-02; >= 9-00, <= 9-00-04
hitachijp1/extensible_snmp_agent>= 12-00, < 12-00-01; 11-00

References

Timeline

Published
Jul 2, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-467905.5In the Linux kernel, the following vulnerability has been resolved: codetag: debug: mark codetags for poisoned page as empty When PG_hwpoiCVE-2024-467915.5In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open CVE-2024-467923.3In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory raw_copy_{to,CVE-2024-467935.5In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder SCVE-2024-467943.3In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmio_read() The mmio_read() function makes aCVE-2024-467955.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset the binding mark of a reused connection Steve French repoCVE-2024-467967.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_set_path_size() If smb2_CVE-2024-467975.5In the Linux kernel, the following vulnerability has been resolved: powerpc/qspinlock: Fix deadlock in MCS queue If an interrupt occurs inCVE-2024-467987.8In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object When using kernel wCVE-2024-467995.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX If numberCVE-2024-46808.8A vulnerability in zenml-io/zenml version 0.56.3 allows attackers to reuse old session credentials or session IDs due to insufficient sessioCVE-2024-468007.8In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enqu
CVE-2024-4679: High severity, CVSS 7.8 | Vulnix