Hitachi HiRDB: Stack-based buffer overflow

Summary

Hitachi HiRDB Server database versions 10, 9 and 9(32), including the Additional Function variants, contain a stack-based buffer overflow (CWE-121). According to the vendor's affected version list, the flaw can be triggered over the network without authentication or user interaction, and the CVSS base score is 9.4 (Critical). The vendor advisory states that the vulnerability applies only to HiRDB on Windows where the remote shell facility has been enabled with the command "pdntenv -ro on"; the code execution impact claimed by secondary trackers is not confirmed by the vendor record.

Affected

• HiRDB Server Version 10: 10-00 to before 10-12-01 (Windows)
• HiRDB Server Version 9: 09-00 to 09-66-22 (Windows)
• HiRDB Server with Additional Function Version 9: 09-00 to 09-66/V (Windows)
• HiRDB Server Version 9(32): 09-02 to 09-66-22 (Windows)
• HiRDB Server with Additional Function Version 9(32): 09-00 to 09-66-/V (Windows)
• Vulnerable condition per vendor: remote shell facility enabled via "pdntenv -ro on"

Fixed in

• HiRDB Server Version 10: 10-12-01 (Windows). Platform-specific builds 10-11-02 and 10-08-05 are listed by Hitachi for other products in the batch; whether they fix this CVE is unknown.
• HiRDB Server Version 9 branches: Unknown. Unverified tracker information suggests 09-66-23; not confirmed by the vendor.

Workaround

Unknown. No vendor-documented workaround identified. Disabling the remote shell facility (pdntenv -ro off) may be relevant, but this is not confirmed by the vendor.

Exploitation

• Public proof-of-concept exploit: none known
• In the wild: not known to be exploited
• CISA KEV listing: not found in the sources checked; not verified directly
• Exploit market price estimate by VulDB (USD 0 to 5k) is not evidence of exploitation

Our recommendation

• Determine whether any HiRDB instance is in use, including vendor-supplied applications
• Check whether HiRDB runs on Windows with the remote shell facility enabled
• Restrict network access to the database to required application hosts and block direct internet exposure
• Patch HiRDB Version 10 to 10-12-01 or the platform-specific fixed build confirmed by Hitachi as a priority
• Plan the Version 9 upgrade once Hitachi confirms the fixed build
• Monitor for public exploit code or KEV listing

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• Hitachi Security Information hitachi-sec-2026-144 www.hitachi.com
• VulDB CVE-2026-82122 vuldb.com
• OffSeq Radar CVE-2026-82122 radar.offseq.com
• Threatint CVE-2026-82122 cve.threatint.com
• Hitachi Security Information hitachi-sec-2026-149 www.hitachi.com

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 23:44.