CVE-2025-0824

lack of validation for firmware update in Hitachi Virtual Storage

State: Published
Severity: 3.7 Low
Published: Jun 29, 2026
Updated: Jun 29, 2026
Reserved: Jan 29, 2025

Description

Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28.

This issue affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.

Scores

CVSS	Score	Vector	Source
3.1	3.7 Low	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L	Hitachi

Weaknesses

CWE-347 Improper verification of cryptographic signature

Affected Products

Product	Versions
Hitachi Virtual Storage Platform One Block 23, 24, 26, 28Hitachi	before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00Affectedfrom DKCMAIN A3-04-21-40/00, ESM A3-04-21/00Not affected

References

https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_308.htmlvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.