CVE-2025-1978: Hitachi Virtual Storage One Block

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

Affected products

  • Hitachi Virtual Storage One Block: version 23 only; version 24 only; version 26 only; version 28 only
  • Hitachi Vsp e1090 Firmware: affected versions not specified
  • Hitachi Vsp e1090h Firmware: affected versions not specified
  • Hitachi Vsp e390 Firmware: affected versions not specified
  • Hitachi Vsp e390h Firmware: affected versions not specified
  • Hitachi Vsp e590 Firmware: affected versions not specified
  • Hitachi Vsp e590h Firmware: affected versions not specified
  • Hitachi Vsp e790 Firmware: affected versions not specified
  • Hitachi Vsp e790h Firmware: affected versions not specified
  • Hitachi Vsp e990 Firmware: affected versions not specified
  • Hitachi Vsp f350 Firmware: affected versions not specified
  • Hitachi Vsp f370 Firmware: affected versions not specified
  • Hitachi Vsp f700 Firmware: affected versions not specified
  • Hitachi Vsp f900 Firmware: affected versions not specified
  • Hitachi Vsp g130 Firmware: affected versions not specified
  • Hitachi Vsp g150 Firmware: affected versions not specified
  • Hitachi Vsp g350 Firmware: affected versions not specified
  • Hitachi Vsp g370 Firmware: affected versions not specified
  • Hitachi Vsp g700 Firmware: affected versions not specified
  • Hitachi Vsp g900 Firmware: affected versions not specified

Published 2026-05-07. Last modified 2026-06-17.