CVE-2025-1978
Essential information
- Published
- 07/05/2026 09:16
- Modified
- 07/05/2026 15:15
- Author
- —
- Creator
- —
- CVSS
- 8.3 HIGH (v3.1)
- CISA KEV
- No
- CWE
- —
- CVSS vector
-
—
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L—
CVSS metrics
- Access vector
- —
- Access complexity
- —
- Authentication
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploitability
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- NETWORK
- Attack complexity
- LOW
- Privileges required
- NONE
- User interaction
- NONE
- Scope
- CHANGED
- Confidentiality impact
- LOW
- Integrity impact
- LOW
- Availability impact
- LOW
- Exploit code maturity
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- —
- Attack complexity
- —
- Attack requirements
- —
- Privileges required
- —
- User interaction
- —
- Confidentiality (V)
- —
- Confidentiality (S)
- —
- Integrity (V)
- —
- Integrity (S)
- —
- Availability (V)
- —
- Availability (S)
- —
- Exploit maturity
- —
Description
Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28.
This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.
NVD status
- Status
- Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:g130:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:g150:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:g350:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:g370:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:g700:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:g900:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:e390:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:e590:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:e790:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:e990:*:*:*:*:*:*:* |
| hitachi / virtual storage platform | cpe:2.3:a:hitachi:virtual_storage_platform:e1090:*:*:*:*:*:*:* |
| hitachi / virtual storage platform one block | cpe:2.3:a:hitachi:virtual_storage_platform_one_block:23:*:*:*:*:*:*:* |
| hitachi / virtual storage platform one block | cpe:2.3:a:hitachi:virtual_storage_platform_one_block:24:*:*:*:*:*:*:* |
| hitachi / virtual storage platform one block | cpe:2.3:a:hitachi:virtual_storage_platform_one_block:26:*:*:*:*:*:*:* |
| hitachi / virtual storage platform one block | cpe:2.3:a:hitachi:virtual_storage_platform_one_block:28:*:*:*:*:*:*:* |