CVE-2025-1978
Description
Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hitachi virtual_storage_one_block | 23, 24, 26, 28 | — |
| hitachi vsp_g130_firmware | No range specified | — |
| hitachi vsp_g150_firmware | No range specified | — |
| hitachi vsp_g350_firmware | No range specified | — |
| hitachi vsp_g370_firmware | No range specified | — |
| hitachi vsp_g700_firmware | No range specified | — |
| hitachi vsp_g900_firmware | No range specified | — |
| hitachi vsp_f350_firmware | No range specified | — |
| hitachi vsp_f370_firmware | No range specified | — |
| hitachi vsp_f700_firmware | No range specified | — |
| hitachi vsp_f900_firmware | No range specified | — |
| hitachi vsp_e390_firmware | No range specified | — |
| hitachi vsp_e590_firmware | No range specified | — |
| hitachi vsp_e790_firmware | No range specified | — |
| hitachi vsp_e990_firmware | No range specified | — |
| hitachi vsp_e1090_firmware | No range specified | — |
| hitachi vsp_e390h_firmware | No range specified | — |
| hitachi vsp_e590h_firmware | No range specified | — |
| hitachi vsp_e790h_firmware | No range specified | — |
| hitachi vsp_e1090h_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.