Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-1978
PUBLISHED
More InfoOfficial Page
Assigner-Hitachi
Assigner Org ID-50d0f415-c707-4733-9afc-8f6c0e9b3f82
View Known Exploited Vulnerability (KEV) details
Published At-07 May, 2026 | 08:05
Updated At-07 May, 2026 | 08:05
Rejected At-
▼CVE Numbering Authority (CNA)
Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

Affected Products
Vendor
Hitachi, Ltd.Hitachi
Product
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900
Default Status
unaffected
Versions
Affected
  • From 0 before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
  • From 0 before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
  • From 0 before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
  • From 0 before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
  • From 0 before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Vendor
Hitachi, Ltd.Hitachi
Product
Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H
Default Status
unaffected
Versions
Affected
  • From 0 before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
  • From 0 before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
  • From 0 before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
  • From 0 before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
  • From 0 before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Vendor
Hitachi, Ltd.Hitachi
Product
Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28
Default Status
unaffected
Versions
Affected
  • From 0 before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00
  • From 0 before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00
  • From 0 before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00
  • From 0 before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00
  • From 0 before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00 (custom)
    • -> unaffectedfromDKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00
Problem Types
TypeCWE IDDescription
CWECWE-94CWE-94 Improper Control of Generation of Code ('Code Injection')
Type: CWE
CWE ID: CWE-94
Description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Metrics
VersionBase scoreBase severityVector
3.18.3HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Version: 3.1
Base score: 8.3
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-242CAPEC-242 Code Injection
CAPEC ID: CAPEC-242
Description: CAPEC-242 Code Injection
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Thomas Josef Riedmaier, Siemens Energy.
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html
N/A
Hyperlink: https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html
Resource: N/A
Details not found