CVE-2025-1978 Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console

CriticalCVSS 9.8 EPSS 0.55%

Published: 2026-05-07 11:05
Updated: 2026-06-17 11:40
Exploit status: No public exploit known

Description

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28.

This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

Affected products

Show 13 more

Product	Affected versions	Fixed in
Hitachi vsp f350 firmware	All versions	No fix listed
Hitachi vsp f370 firmware	All versions	No fix listed
Hitachi vsp f700 firmware	All versions	No fix listed
Hitachi vsp f900 firmware	All versions	No fix listed
Hitachi vsp e390 firmware	All versions	No fix listed
Hitachi vsp e590 firmware	All versions	No fix listed
Hitachi vsp e790 firmware	All versions	No fix listed
Hitachi vsp e990 firmware	All versions	No fix listed
Hitachi vsp e1090 firmware	All versions	No fix listed
Hitachi vsp e390h firmware	All versions	No fix listed
Hitachi vsp e590h firmware	All versions	No fix listed
Hitachi vsp e790h firmware	All versions	No fix listed
Hitachi vsp e1090h firmware	All versions	No fix listed

References

www.hitachi.com vendor-advisory

CVSS v3.1

9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (3)

v3.1 8.3 · hitachi
v3.1 9.8 · nvd@nist.gov
v3.1 8.3 · hirt@hitachi.co.jp

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.55% (percentile 46.4)
CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.

Product	Affected versions	Fixed in
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900	< DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00	DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900	< DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00	DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900	< DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00	DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900	< DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00	DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900	< DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00	DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H	< DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00	DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H	< DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00	DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H	< DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00	DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H	< DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00	DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H	< DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00	DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28	< DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00	DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28	< DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00	DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28	< DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00	DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28	< DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00	DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28	< DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00	DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Hitachi virtual storage one block	= 23	No fix listed
Hitachi virtual storage one block	= 24	No fix listed
Hitachi virtual storage one block	= 26	No fix listed
Hitachi virtual storage one block	= 28	No fix listed
Hitachi vsp g130 firmware	All versions	No fix listed
Hitachi vsp g150 firmware	All versions	No fix listed
Hitachi vsp g350 firmware	All versions	No fix listed
Hitachi vsp g370 firmware	All versions	No fix listed
Hitachi vsp g700 firmware	All versions	No fix listed
Hitachi vsp g900 firmware	All versions	No fix listed