CVE-2025-1978

HIGH

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console

Title source: cna
STIX 2.1

Description

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

References (1)

Core 1

Scores

CVSS v3 8.3
EPSS 0.0011
EPSS Percentile 28.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-94
Status published
Products (38)
Hitachi/Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H < DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
Hitachi/Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
Hitachi/Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Hitachi/Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
Hitachi/Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
Hitachi/Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 < DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
Hitachi/Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
Hitachi/Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Hitachi/Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
Hitachi/Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
... and 28 more
Published May 07, 2026
Tracked Since May 07, 2026