CVE-2025-1978

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-1978
Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

8.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References
Link Resource
https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hitachi:virtual_storage_one_block:23:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:24:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:26:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:28:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hitachi:vsp_g130_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g130:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:hitachi:vsp_g150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g150:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:hitachi:vsp_g350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g350:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:hitachi:vsp_g370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g370:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:hitachi:vsp_g700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g700:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:hitachi:vsp_g900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g900:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:hitachi:vsp_f350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f350:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:hitachi:vsp_f370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f370:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:hitachi:vsp_f700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f700:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:hitachi:vsp_f900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f900:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:hitachi:vsp_e390_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e390:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:hitachi:vsp_e590_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e590:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:hitachi:vsp_e790_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e790:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:hitachi:vsp_e990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e990:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:hitachi:vsp_e1090_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e1090:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:hitachi:vsp_e390h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e390h:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:hitachi:vsp_e590h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e590h:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:hitachi:vsp_e790h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e790h:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:hitachi:vsp_e1090h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e1090h:-:*:*:*:*:*:*:*
History

13 May 2026, 19:15

Type Values Removed Values Added
References () https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html - () https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_307.html - Vendor Advisory
CPE cpe:2.3:o:hitachi:vsp_f900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e390_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_f350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f350:-:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:23:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e790h:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e790_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e590_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f900:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:28:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e590h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e390h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g350:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e1090:-:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:24:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_f370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f700:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g150:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f370:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e990:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e1090h:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g370:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e390h:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g900:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:26:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g130_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g130:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e790:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e590:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e390:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_f700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e1090h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e1090_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e590h:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e790h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g700:-:*:*:*:*:*:*:*
First Time Hitachi virtual Storage One Block
Hitachi vsp E1090 Firmware
Hitachi vsp G900 Firmware
Hitachi vsp E390h Firmware
Hitachi vsp E590
Hitachi
Hitachi vsp E1090
Hitachi vsp F370 Firmware
Hitachi vsp G370
Hitachi vsp G150 Firmware
Hitachi vsp E790 Firmware
Hitachi vsp F900
Hitachi vsp E590 Firmware
Hitachi vsp E590h
Hitachi vsp E390
Hitachi vsp F700 Firmware
Hitachi vsp F350
Hitachi vsp G130
Hitachi vsp G700 Firmware
Hitachi vsp E1090h Firmware
Hitachi vsp G150
Hitachi vsp E990
Hitachi vsp E790
Hitachi vsp G700
Hitachi vsp G900
Hitachi vsp F370
Hitachi vsp E1090h
Hitachi vsp E590h Firmware
Hitachi vsp E990 Firmware
Hitachi vsp E790h
Hitachi vsp G350 Firmware
Hitachi vsp F350 Firmware
Hitachi vsp E790h Firmware
Hitachi vsp E390h
Hitachi vsp G130 Firmware
Hitachi vsp F900 Firmware
Hitachi vsp G370 Firmware
Hitachi vsp F700
Hitachi vsp E390 Firmware
Hitachi vsp G350

07 May 2026, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-07 09:16

Updated : 2026-05-13 19:15

NVD link : CVE-2025-1978

Mitre link : CVE-2025-1978

CVE.ORG link : CVE-2025-1978

JSON object : View

Products Affected

hitachi

  • vsp_e1090_firmware
  • vsp_e390_firmware
  • vsp_g350_firmware
  • vsp_e390h
  • vsp_e1090h_firmware
  • vsp_e1090
  • vsp_e990_firmware
  • vsp_e990
  • vsp_f370
  • vsp_f350_firmware
  • vsp_g150
  • vsp_e390
  • vsp_e590h_firmware
  • vsp_f700_firmware
  • vsp_f700
  • vsp_e590_firmware
  • vsp_e790
  • vsp_f900_firmware
  • vsp_e1090h
  • vsp_g350
  • vsp_e790h
  • vsp_g900
  • vsp_f350
  • vsp_e590
  • vsp_g700_firmware
  • vsp_g900_firmware
  • vsp_e790_firmware
  • vsp_e790h_firmware
  • vsp_f370_firmware
  • vsp_g370
  • virtual_storage_one_block
  • vsp_g370_firmware
  • vsp_f900
  • vsp_g130
  • vsp_g150_firmware
  • vsp_g700
  • vsp_e390h_firmware
  • vsp_e590h
  • vsp_g130_firmware
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')