{"schemaVersion":3,"id":"CVE-2025-1978","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28.\n\nThis issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.","dates":{"published":"2026-05-07T08:05:42.743Z","modified":"2026-05-07T13:40:00.385Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00547,"percentile":0.45027,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00547},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00547,"percentile":0.45027}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00547,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00547,"percentile":0.45027}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/94.html"}],"affected":[{"vendor":"hitachi","product":"hitachi virtual storage platform e390, e590, e790, e990, e1090, e390h, e590h, e790h, e1090h","name":"Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H","label":"hitachi virtual storage platform e390, e590, e790, e990, e1090, e390h, e590h, e790h, e1090h","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00","noFixRecorded":false,"fixedIn":null}],"versionsText":"< DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00 | < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00 | < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00 | < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00 | < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00","eol":null,"hubHref":"/vendor/hitachi/hitachi_virtual_storage_platform_e390_e590_e790_e990_e1090_e390h_e590h_e790h_e1090h"},{"vendor":"hitachi","product":"hitachi virtual storage platform g130, g150, g350, g370, g700, g900, f350, f370, f700, f900","name":"Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900","label":"hitachi virtual storage platform g130, g150, g350, g370, g700, g900, f350, f370, f700, f900","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00","noFixRecorded":false,"fixedIn":null}],"versionsText":"< DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00 | < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00 | < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00 | < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00 | < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00","eol":null,"hubHref":"/vendor/hitachi/hitachi_virtual_storage_platform_g130_g150_g350_g370_g700_g900_f350_f370_f700_f900"},{"vendor":"hitachi","product":"hitachi virtual storage platform one block 23, one block 24, one block 26, one block 28","name":"Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28","label":"hitachi virtual storage platform one block 23, one block 24, one block 26, one block 28","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00","noFixRecorded":false,"fixedIn":null},{"text":"< DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00","noFixRecorded":false,"fixedIn":null}],"versionsText":"< DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00 | < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00 | < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00 | < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00 | < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00","eol":null,"hubHref":"/vendor/hitachi/hitachi_virtual_storage_platform_one_block_23_one_block_24_one_block_26_one_block_28"},{"vendor":"hitachi","product":"virtual_storage_one_block","name":"virtual storage one block","label":"virtual_storage_one_block","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"23","noFixRecorded":false,"fixedIn":null},{"text":"24","noFixRecorded":false,"fixedIn":null},{"text":"26","noFixRecorded":false,"fixedIn":null},{"text":"28","noFixRecorded":false,"fixedIn":null}],"versionsText":"23 | 24 | 26 | 28","eol":null,"hubHref":"/vendor/hitachi/virtual_storage_one_block"},{"vendor":"hitachi","product":"vsp_e1090_firmware","name":"vsp e1090 firmware","label":"vsp_e1090_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_e1090"},{"vendor":"hitachi","product":"vsp_e1090h_firmware","name":"vsp e1090h firmware","label":"vsp_e1090h_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_e1090h"},{"vendor":"hitachi","product":"vsp_e390_firmware","name":"vsp e390 firmware","label":"vsp_e390_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_e390"},{"vendor":"hitachi","product":"vsp_e390h_firmware","name":"vsp e390h firmware","label":"vsp_e390h_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_e390h"},{"vendor":"hitachi","product":"vsp_e590_firmware","name":"vsp e590 firmware","label":"vsp_e590_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_e590"},{"vendor":"hitachi","product":"vsp_e590h_firmware","name":"vsp e590h firmware","label":"vsp_e590h_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_e590h"},{"vendor":"hitachi","product":"vsp_e790_firmware","name":"vsp e790 firmware","label":"vsp_e790_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_e790"},{"vendor":"hitachi","product":"vsp_e790h_firmware","name":"vsp e790h firmware","label":"vsp_e790h_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_e790h"},{"vendor":"hitachi","product":"vsp_e990_firmware","name":"vsp e990 firmware","label":"vsp_e990_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_e990"},{"vendor":"hitachi","product":"vsp_f350_firmware","name":"vsp f350 firmware","label":"vsp_f350_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_f350"},{"vendor":"hitachi","product":"vsp_f370_firmware","name":"vsp f370 firmware","label":"vsp_f370_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_f370"},{"vendor":"hitachi","product":"vsp_f700_firmware","name":"vsp f700 firmware","label":"vsp_f700_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_f700"},{"vendor":"hitachi","product":"vsp_f900_firmware","name":"vsp f900 firmware","label":"vsp_f900_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_f900"},{"vendor":"hitachi","product":"vsp_g130_firmware","name":"vsp g130 firmware","label":"vsp_g130_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_g130"},{"vendor":"hitachi","product":"vsp_g150_firmware","name":"vsp g150 firmware","label":"vsp_g150_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_g150"},{"vendor":"hitachi","product":"vsp_g350_firmware","name":"vsp g350 firmware","label":"vsp_g350_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_g350"},{"vendor":"hitachi","product":"vsp_g370_firmware","name":"vsp g370 firmware","label":"vsp_g370_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_g370"},{"vendor":"hitachi","product":"vsp_g700_firmware","name":"vsp g700 firmware","label":"vsp_g700_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_g700"},{"vendor":"hitachi","product":"vsp_g900_firmware","name":"vsp g900 firmware","label":"vsp_g900_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/hitachi/vsp_g900"}],"affectedCount":23,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html","label":"www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html","hostname":"www.hitachi.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-05-07T08:05:42.743Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-05-07T13:40:00.385Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T04:44:23.459Z","stale":false,"partial":false}}