CVE-2025-1978

Published May 7, 2026

Last updated 7 days ago

Overview

Description
Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.
Source
hirt@hitachi.co.jp
NVD status
Analyzed
Products
virtual_storage_one_block, vsp_g130_firmware, vsp_g150_firmware, vsp_g350_firmware, vsp_g370_firmware, vsp_g700_firmware, vsp_g900_firmware, vsp_f350_firmware, vsp_f370_firmware, vsp_f700_firmware, vsp_f900_firmware, vsp_e390_firmware, vsp_e590_firmware, vsp_e790_firmware, vsp_e990_firmware, vsp_e1090_firmware, vsp_e390h_firmware, vsp_e590h_firmware, vsp_e790h_firmware, vsp_e1090h_firmware

Risk scores

CVSS 3.1

Type
Primary
Base score
9.8
Impact score
5.9
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

hirt@hitachi.co.jp
CWE-94

Social media

Hype score
Not currently trending

Configurations