CVE-2025-1978
9.8 CritiqueDescription
Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.
Produits concernés
- Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900
- Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H
- Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28
- Hitachi virtual storage one block
- Hitachi vsp g130 firmware
- Hitachi vsp g150 firmware
- Hitachi vsp g350 firmware
- Hitachi vsp g370 firmware
- Hitachi vsp g700 firmware
- Hitachi vsp g900 firmware
- Hitachi vsp f350 firmware
- Hitachi vsp f370 firmware
- Hitachi vsp f700 firmware
- Hitachi vsp f900 firmware
- Hitachi vsp e390 firmware
- Hitachi vsp e590 firmware
- Hitachi vsp e790 firmware
- Hitachi vsp e990 firmware
- Hitachi vsp e1090 firmware
- Hitachi vsp e390h firmware
- Hitachi vsp e590h firmware
- Hitachi vsp e790h firmware
- Hitachi vsp e1090h firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.3 Élevée | hirt@hitachi.co.jp | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L |
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |