漏洞概述 在 JPI/IT Desktop Management 2 和 JPI/NETM/DM 中发现多个漏洞： CVE-2025-6515: 远程代码执行漏洞 (Remote Code Execution Vulnerability)，CVSS 评分 8.8 (High)。 CVE-2025-6516: 缓冲区溢出漏洞 (Buffer Overflow Vulnerability)，CVSS 评分 5.5 (Medium)。 影响范围 以下产品的特定版本受到漏洞影响： JPI/IT Desktop Management 2 - Operations Director: 13-50 至 13-50-01, 13-11 至 13-11-03, 13-10 至 13-10-06, 13-01 至 13-01-06, 13-00 至 13-00-04, 12-60 至 12-60-11, 12-50 至 12-50-11, 12-10 至 12-10-12, 12-00 至 12-00-09, 11-51 至 11-51-10, 11-50 至 11-50-08, 11-10 至 11-10-12, 11-01 至 11-01-12, 10-50 至 10-50-12 Job Management Partner 1/IT Desktop Management 2 - Manager: 10-50 至 10-50-11 JPI/IT Desktop Management - Manager: 10-10 至 10-10-16, 10-02 至 10-02-05, 10-01 至 10-01-05, 10-00 至 10-00-02, 09-51 至 09-51-05, 09-50 至 09-50-03 Job Management Partner 1/IT Desktop Management - Manager: 10-10 至 10-10-16, 10-01 至 10-01-06, 09-50 至 09-50-03 JPI/NETM/DM Manager: 10-20 至 10-20-02, 10-10 至 10-10-25, 09-51 至 09-51-14, 09-50 至 09-50-20, 09-12 至 09-12-16, 09-10 至 09-10-15, 09-01 至 09-01-14, 09-00 至 09-00-14 JPI/NETM/DM Client: 10-20 至 10-20-02, 10-10 至 10-10-25, 09-51 至 09-51-14, 09-50 至 09-50-20, 09-12 至 09-12-16, 09-10 至 09-10-15, 09-01 至 09-01-14, 09-00 至 09-00-14 Job Management Partner 1/Software Distribution Manager: 09-51 至 09-51-13, 09-50 至 09-50-09, 09-00 至 09-00-09 Job Management Partner 1/Software Distribution Client: 09-51 至 09-51-13, 09-50 至 09-50-09, 09-00 至 09-00-09 修复方案 建议将受影响产品升级到以下安全版本： JPI/IT Desktop Management 2 - Manager: 13-50-03, 13-11-04, 13-10-07, 13-01-07, 13-00-05, 12-60-12 JPI/IT Desktop Management 2 - Operations Director: 13-50-03, 13-11-04, 13-10-07, 13-01-07, 13-00-05, 12-60-12 JPI/NETM/DM Manager: 10-30 JPI/NETM/DM Client: 10-30 注：对于未在上述列表中列出的受影响产品，请联系 Hitachi 支持服务代表获取详细信息。 POC 代码 无