{"id":"CVE-2025-1978","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-1978","generatedAt":"2026-10-28T02:55:21.266Z","title":"Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090,…","description":"Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28.\n\nThis issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.","published":"2026-05-07T09:16:26.000Z","lastModified":"2026-06-17T08:40:28.000Z","status":"Analyzed","sourceIdentifier":"hirt@hitachi.co.jp","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-94"],"affected":["hitachi/virtual storage one block","hitachi/vsp g130 firmware","hitachi/vsp g150 firmware","hitachi/vsp g350 firmware","hitachi/vsp g370 firmware","hitachi/vsp g700 firmware","hitachi/vsp g900 firmware","hitachi/vsp f350 firmware","hitachi/vsp f370 firmware","hitachi/vsp f700 firmware","hitachi/vsp f900 firmware","hitachi/vsp e390 firmware","hitachi/vsp e590 firmware","hitachi/vsp e790 firmware","hitachi/vsp e990 firmware","hitachi/vsp e1090 firmware","hitachi/vsp e390h firmware","hitachi/vsp e590h firmware","hitachi/vsp e790h firmware","hitachi/vsp e1090h firmware"],"epss":{"score":0.00547,"percentile":0.45604,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.55%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html","tags":["Vendor Advisory"],"source":"hirt@hitachi.co.jp"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-1978","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}