Log in Start free

Vulnerability · Published May 7, 2026 · Assigned by Hitachi

CVE-2025-1978Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console

High 8.3

In plain English

A high-severity code injection in Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.5%top 54.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

Affected products (as reported)

VendorProductVersions
Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 0 – before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/000 – before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/000 – before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/000 – before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/000 – before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H 0 – before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/000 – before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/000 – before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/000 – before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/000 – before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Hitachi Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 0 – before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/000 – before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/000 – before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/000 – before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/000 – before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

References