This vulnerability (CVE-2025-65115) in Hitachi JP1/IT Desktop Management 2 - Manager and related components on Windows allows remote code execution due to improper external control of file name or path (CWE-73). Multiple versions from 09-00 through 13-50 are affected. The CVSS 3.1 score of 8.8 reflects network attack vector, low attack complexity, requiring low privileges but no user interaction, with high impact on confidentiality, integrity, and availability. The vendor has not published an official fix or remediation level, and no cloud service is involved. The vulnerability is publicly disclosed but without evidence of exploitation in the wild.

Successful exploitation of this vulnerability could allow an attacker with network access and low privileges to execute arbitrary code remotely on affected systems, potentially compromising confidentiality, integrity, and availability of the system. Given the high CVSS score, the impact is significant, but no active exploitation has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided by Hitachi at this time, organizations should monitor vendor communications for updates. Until a patch is available, restricting network access to affected systems and applying principle of least privilege may help reduce exposure.