CVE-2025-27523

HIGH EPSS 23.8%

Published May 15, 20251y ago · Modified Jun 17, 20262w ago

8.7 CVSS 3.1

High

Published May 15, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06.

CVSS Details

Base Score

8.7

Exploitability

2.2

Impact

5.8

Vector string

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H

Attack Vector Network

Attack Complexity High

Privileges Required None

User Interaction None

Scope Changed

Confidentiality High

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

23.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-611

References 1

hitachi.com https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-115/index.html

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.