CVE-2024-4679: Folder Permission Vulnerability in JP1/Extensible SNMP Agent

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-02 · updated 2026-06-17
Weakness: CWE-276

Description

Incorrect Default Permissions vulnerability in Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNMP Agent on Windows, Hitachi Job Management Partner1/Extensible SNMP Agent on Windows allows File Manipulation.This issue affects JP1/Extensible SNMP Agent for Windows: from 12-00 before 12-00-01, from 11-00 through 11-00-*; JP1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04; Job Management Partner1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04.

Affected products

Hitachi Job Management Partner1/Extensible Snmp Agent: from 10-10 through 10-10-01; from 10-00 through 10-00-02; from 9-00 through 9-00-04
Hitachi Jp1/Extensible Snmp Agent: from 10-10 through 10-10-01; from 10-00 through 10-00-02; from 9-00 through 9-00-04; from 12-00 before 12-00-01; 11-00 — fixed in 12-00-01

How to fix

Upgrade to a fixed version: Hitachi Jp1/Extensible Snmp Agent 12-00-01. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-4679 or the next vulnerability affects your stack