Riskcovery

CVE-2025-1978

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console

State
Published
Severity
8.3 High
Published
May 7, 2026
Updated
May 7, 2026
Reserved
Mar 5, 2025

Read the record on cve.org

Description

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28.

This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

Scores

CVSSScoreVectorSource
3.18.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:LHitachi

Weaknesses

  • CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

ProductVersions
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900Hitachi
  • before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00Affectedfrom DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00Not affected
  • before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00Affectedfrom DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00Not affected
  • before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00Affectedfrom DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00Not affected
  • before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00Affectedfrom DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00Not affected
  • before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00Affectedfrom DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00Not affected
Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090HHitachi
  • before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00Affectedfrom DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00Not affected
  • before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00Affectedfrom DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00Not affected
  • before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00Affectedfrom DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00Not affected
  • before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00Affectedfrom DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00Not affected
  • before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00Affectedfrom DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00Not affected
Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28Hitachi
  • before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00Affectedfrom DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00Not affected
  • before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00Affectedfrom DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00Not affected
  • before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00Affectedfrom DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00Not affected
  • before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00Affectedfrom DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00Not affected
  • before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00Affectedfrom DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.