CVE Database
/

CVE-2025-1978

Back to search

CVE-2025-1978

Published: May 7, 2026

Modified: May 7, 2026

PUBLISHED

CVSS v3.1

8.3

HIGH

Description

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

VendorProductVersions

Hitachi

Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900

affected
0 - < DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
affected
0 - < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
affected
0 - < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
affected
0 - < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
affected
0 - < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00

Hitachi

Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H

affected
0 - < DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
affected
0 - < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
affected
0 - < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
affected
0 - < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
affected
0 - < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00

Hitachi

Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28

affected
0 - < DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
affected
0 - < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
affected
0 - < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
affected
0 - < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
affected
0 - < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now