CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2025-1978
Critical (9.8) in hitachi. EPSS 0.5% chance of exploitation in the next 30 days.
Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28.
This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hitachi:virtual_storage_one_block
- hitachi:vsp_e1090_firmware
- hitachi:vsp_e1090h_firmware
- hitachi:vsp_e390_firmware
- hitachi:vsp_e390h_firmware
- hitachi:vsp_e590_firmware
- hitachi:vsp_e590h_firmware
- hitachi:vsp_e790_firmware
- hitachi:vsp_e790h_firmware
- hitachi:vsp_e990_firmware
- hitachi:vsp_f350_firmware
- hitachi:vsp_f370_firmware
- hitachi:vsp_f700_firmware
- hitachi:vsp_f900_firmware
- hitachi:vsp_g130_firmware
- hitachi:vsp_g150_firmware
- hitachi:vsp_g350_firmware
- hitachi:vsp_g370_firmware
- hitachi:vsp_g700_firmware
- hitachi:vsp_g900_firmware