CVE-2025-1978

Published: May 7, 2026Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

Affected (23)

Products: Hitachi: Virtual Storage One Block, Vsp G130 Firmware, Vsp G150 Firmware, Vsp G350 Firmware, Vsp G370 Firmware, Vsp G700 Firmware, Vsp G900 Firmware, Vsp F350 Firmware, Vsp F370 Firmware, Vsp F700 Firmware, Vsp F900 Firmware, Vsp E390 Firmware, Vsp E590 Firmware, Vsp E790 Firmware, Vsp E990 Firmware, Vsp E1090 Firmware, Vsp E390h Firmware, Vsp E590h Firmware, Vsp E790h Firmware, Vsp E1090h Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Hitachi Virtual Storage One Block	Version 23
Hitachi Virtual Storage One Block	Version 24
Hitachi Virtual Storage One Block	Version 26
Hitachi Virtual Storage One Block	Version 28

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp G130 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp G130	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp G150 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp G150	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp G350 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp G350	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp G370 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp G370	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp G700 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp G700	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp G900 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp G900	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp F350 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp F350	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp F370 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp F370	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp F700 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp F700	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp F900 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp F900	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp E390 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp E390	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp E590 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp E590	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp E790 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp E790	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp E990 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp E990	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp E1090 Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp E1090	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp E390h Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp E390h	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp E590h Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp E590h	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp E790h Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp E790h	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitachi Vsp E1090h Firmware	All versions

Running on/with	Platform Versions
Hitachi Vsp E1090h	All versions

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (1)

https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html

Source: hirt@hitachi.co.jp

Vendor Advisory

Timeline

No history available yet.