Hitachi JPI/IT Desktop Management 2 RCE and Buffer Overflow Vulnerabilities (CVE-2025-6515/6516)

Vulnerability Overview Multiple vulnerabilities have been discovered in JPI/IT Desktop Management 2 and JPI/NETM/DM: CVE-2025-6515: Remote Code Execution (RCE) vulnerability, CVSS score 8.8 (High). CVE-2025-6516: Buffer Overflow vulnerability, CVSS score 5.5 (Medium). Affected Products The following specific product versions are affected by these vulnerabilities: JPI/IT Desktop Management 2 - Operations Director: 13-50 to 13-50-01, 13-11 to 13-11-03, 13-10 to 13-10-06, 13-01 to 13-01-06, 13-00 to 13-00-04, 12-60 to 12-60-11, 12-50 to 12-50-11, 12-10 to 12-10-12, 12-00 to 12-00-09, 11-51 to 11-51-10, 11-50 to 11-50-08, 11-10 to 11-10-12, 11-01 to 11-01-12, 10-50 to 10-50-12 Job Management Partner 1/IT Desktop Management 2 - Manager: 10-50 to 10-50-11 JPI/IT Desktop Management - Manager: 10-10 to 10-10-16, 10-02 to 10-02-05, 10-01 to 10-01-05, 10-00 to 10-00-02, 09-51 to 09-51-05, 09-50 to 09-50-03 Job Management Partner 1/IT Desktop Management - Manager: 10-10 to 10-10-16, 10-01 to 10-01-06, 09-50 to 09-50-03 JPI/NETM/DM Manager: 10-20 to 10-20-02, 10-10 to 10-10-25, 09-51 to 09-51-14, 09-50 to 09-50-20, 09-12 to 09-12-16, 09-10 to 09-10-15, 09-01 to 09-01-14, 09-00 to 09-00-14 JPI/NETM/DM Client: 10-20 to 10-20-02, 10-10 to 10-10-25, 09-51 to 09-51-14, 09-50 to 09-50-20, 09-12 to 09-12-16, 09-10 to 09-10-15, 09-01 to 09-01-14, 09-00 to 09-00-14 Job Management Partner 1/Software Distribution Manager: 09-51 to 09-51-13, 09-50 to 09-50-09, 09-00 to 09-00-09 Job Management Partner 1/Software Distribution Client: 09-51 to 09-51-13, 09-50 to 09-50-09, 09-00 to 09-00-09 Remediation It is recommended to upgrade affected products to the following secure versions: JPI/IT Desktop Management 2 - Manager: 13-50-03, 13-11-04, 13-10-07, 13-01-07, 13-00-05, 12-60-12 JPI/IT Desktop Management 2 - Operations Director: 13-50-03, 13-11-04, 13-10-07, 13-01-07, 13-00-05, 12-60-12 JPI/NETM/DM Manager: 10-30 JPI/NETM/DM Client: 10-30 Note: For affected products not listed above, please contact a Hitachi support representative for further information. Proof of Concept (PoC) None

Goal Reached Thanks to every supporter — we hit 100%!

Hitachi JPI/IT Desktop Management 2 RCE and Buffer Overflow Vulnerabilities (CVE-2025-6515/6516)