What’s Vulnerable › Vulnerabilities

CVE-2025-1978: Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-07 · updated 2026-06-17
• Weakness: CWE-94

Description

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

Affected products

• Hitachi Virtual Storage One Block: 23, 24, 26, 28
• Hitachi Vsp E1090 Firmware: all versions
• Hitachi Vsp E1090H Firmware: all versions
• Hitachi Vsp E390 Firmware: all versions
• Hitachi Vsp E390H Firmware: all versions
• Hitachi Vsp E590 Firmware: all versions
• Hitachi Vsp E590H Firmware: all versions
• Hitachi Vsp E790 Firmware: all versions
• Hitachi Vsp E790H Firmware: all versions
• Hitachi Vsp E990 Firmware: all versions
• Hitachi Vsp F350 Firmware: all versions
• Hitachi Vsp F370 Firmware: all versions
• Hitachi Vsp F700 Firmware: all versions
• Hitachi Vsp F900 Firmware: all versions
• Hitachi Vsp G130 Firmware: all versions
• Hitachi Vsp G150 Firmware: all versions
• Hitachi Vsp G350 Firmware: all versions
• Hitachi Vsp G370 Firmware: all versions
• Hitachi Vsp G700 Firmware: all versions
• Hitachi Vsp G900 Firmware: all versions

References

• https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html

Get alerted when CVE-2025-1978 or the next vulnerability affects your stack