CVE-2025-7737: DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform

Severity: high (CVSS 8.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-19 · updated 2026-09-29
Weakness: CWE-770

Description

DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E990, E1090, E1090H: before DKCMAIN Ver.93-07-21-80/00-05, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-07-01-80/00-07, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-06-82-80/00-06, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-06-63-80/00-04, CHB(iSCSI) Ver.88-01-02-04; Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H: before DKCMAIN Ver.93-07-21-x0/00-05, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-07-01-x0/00-07, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-06-82-x0/00-06, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-06-63-x0/00-04, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-07-24-x0/00-02, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-07-02-x0/00-02, CHB(iSCSI) Ver.88-01-02-04; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900: before DKCMAIN Ver.88-08-10-x0/00-05, CHB(iSCSI) Ver.88-01-02-04; Hitachi Virtual Storage Platform G100, G200, G400, G600, G800, F400, F600, F800: before DKCMAIN Ver.83-06-20-x0/00-05, CHB(iSCSI) Ver.83-01-01-29; Hitachi Virtual Storage Platform VX8, 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver.90-09-01-00/01-01, CHB(iSCSI) Ver.90-01-01-07, before DKCMAIN Ver.90-08-83-00/01-01, CHB(iSCSI) Ver.90-01-01-07, before DKCMAIN Ver.90-08-63-00/01-01, CHB(iSCSI) Ver.90-01-01-07; Hitachi Virtual Storage Platform VX7, G1000, G1500, F1500: before DKCMAIN Ver.80-06-93-00/00-04, ISFC Ver.80-01-17.

Affected products

Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H: before DKCMAIN Ver.93-07-21-x0/00-05, CHB(iSCSI) Ver.88-01-02-04; before DKCMAIN Ver.93-07-01-x0/00-07, CHB(iSCSI) Ver.88-01-02-04; before DKCMAIN Ver.93-06-82-x0/00-06, CHB(iSCSI) Ver.88-01-02-04; before DKCMAIN Ver.93-06-63-x0/00-04, CHB(iSCSI) Ver.88-01-02-04; before DKCMAIN Ver.93-07-24-x0/00-02, CHB(iSCSI) Ver.88-01-02-04; before DKCMAIN Ver.93-07-02-x0/00-02, CHB(iSCSI) Ver.88-01-02-04 — fixed in CHB(iSCSI) Ver.88-01-02-04, DKCMAIN Ver.93-06-63-x0/00-04, DKCMAIN Ver.93-06-82-x0/00-06, DKCMAIN Ver.93-07-01-x0/00-07, DKCMAIN Ver.93-07-02-x0/00-02, DKCMAIN Ver.93-07-21-x0/00-05
Hitachi Virtual Storage Platform E990, E1090, E1090H: before DKCMAIN Ver.93-07-21-80/00-05, CHB(iSCSI) Ver.88-01-02-04; before DKCMAIN Ver.93-07-01-80/00-07, CHB(iSCSI) Ver.88-01-02-04; before DKCMAIN Ver.93-06-82-80/00-06, CHB(iSCSI) Ver.88-01-02-04; before DKCMAIN Ver.93-06-63-80/00-04, CHB(iSCSI) Ver.88-01-02-04 — fixed in CHB(iSCSI) Ver.88-01-02-04, DKCMAIN Ver.93-06-63-80/00-04, DKCMAIN Ver.93-06-82-80/00-06, DKCMAIN Ver.93-07-01-80/00-07, DKCMAIN Ver.93-07-21-80/00-05
Hitachi Virtual Storage Platform G100, G200, G400, G600, G800, F400, F600, F800: before DKCMAIN Ver.83-06-20-x0/00-05, CHB(iSCSI) Ver.83-01-01-29 — fixed in CHB(iSCSI) Ver.83-01-01-29, DKCMAIN Ver.83-06-20-x0/00-05
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900: before DKCMAIN Ver.88-08-10-x0/00-05, CHB(iSCSI) Ver.88-01-02-04 — fixed in CHB(iSCSI) Ver.88-01-02-04, DKCMAIN Ver.88-08-10-x0/00-05
Hitachi Virtual Storage Platform VX7, G1000, G1500, F1500: before DKCMAIN Ver.80-06-93-00/00-04, ISFC Ver.80-01-17 — fixed in ISFC Ver.80-01-17, DKCMAIN Ver.80-06-93-00/00-04
Hitachi Virtual Storage Platform VX8, 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver.90-09-01-00/01-01, CHB(iSCSI) Ver.90-01-01-07; before DKCMAIN Ver.90-08-83-00/01-01, CHB(iSCSI) Ver.90-01-01-07; before DKCMAIN Ver.90-08-63-00/01-01, CHB(iSCSI) Ver.90-01-01-07 — fixed in CHB(iSCSI) Ver.90-01-01-07, DKCMAIN Ver.90-08-63-00/01-01, DKCMAIN Ver.90-08-83-00/01-01, DKCMAIN Ver.90-09-01-00/01-01

How to fix

Upgrade to a fixed version: Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H CHB(iSCSI) Ver.88-01-02-04, DKCMAIN Ver.93-06-63-x0/00-04, DKCMAIN Ver.93-06-82-x0/00-06, DKCMAIN Ver.93-07-01-x0/00-07; Hitachi Virtual Storage Platform E990, E1090, E1090H CHB(iSCSI) Ver.88-01-02-04, DKCMAIN Ver.93-06-63-80/00-04, DKCMAIN Ver.93-06-82-80/00-06, DKCMAIN Ver.93-07-01-80/00-07; Hitachi Virtual Storage Platform G100, G200, G400, G600, G800, F400, F600, F800 CHB(iSCSI) Ver.83-01-01-29, DKCMAIN Ver.83-06-20-x0/00-05; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 CHB(iSCSI) Ver.88-01-02-04, DKCMAIN Ver.88-08-10-x0/00-05; Hitachi Virtual Storage Platform VX7, G1000, G1500, F1500 ISFC Ver.80-01-17, DKCMAIN Ver.80-06-93-00/00-04; Hitachi Virtual Storage Platform VX8, 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H CHB(iSCSI) Ver.90-01-01-07, DKCMAIN Ver.90-08-63-00/01-01, DKCMAIN Ver.90-08-83-00/01-01, DKCMAIN Ver.90-09-01-00/01-01. Check the vendor advisory for mitigations.

References

https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_312.html

Get alerted when CVE-2025-7737 or the next vulnerability affects your stack