CVE-2025-1978
HIGHDescription
Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.
Is your site exposed to CVE-2025-1978?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| hitachi | virtual_storage_one_block |
| hitachi | virtual_storage_one_block |
| hitachi | virtual_storage_one_block |
| hitachi | virtual_storage_one_block |
| hitachi | vsp_g130_firmware |
| hitachi | vsp_g130 |
| hitachi | vsp_g150_firmware |
| hitachi | vsp_g150 |
| hitachi | vsp_g350_firmware |
| hitachi | vsp_g350 |
| hitachi | vsp_g370_firmware |
| hitachi | vsp_g370 |
| hitachi | vsp_g700_firmware |
| hitachi | vsp_g700 |
| hitachi | vsp_g900_firmware |
| hitachi | vsp_g900 |
| hitachi | vsp_f350_firmware |
| hitachi | vsp_f350 |
| hitachi | vsp_f370_firmware |
| hitachi | vsp_f370 |
| hitachi | vsp_f700_firmware |
| hitachi | vsp_f700 |
| hitachi | vsp_f900_firmware |
| hitachi | vsp_f900 |
| hitachi | vsp_e390_firmware |
| hitachi | vsp_e390 |
| hitachi | vsp_e590_firmware |
| hitachi | vsp_e590 |
| hitachi | vsp_e790_firmware |
| hitachi | vsp_e790 |
| hitachi | vsp_e990_firmware |
| hitachi | vsp_e990 |
| hitachi | vsp_e1090_firmware |
| hitachi | vsp_e1090 |
| hitachi | vsp_e390h_firmware |
| hitachi | vsp_e390h |
| hitachi | vsp_e590h_firmware |
| hitachi | vsp_e590h |
| hitachi | vsp_e790h_firmware |
| hitachi | vsp_e790h |
| hitachi | vsp_e1090h_firmware |
| hitachi | vsp_e1090h |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-1978? +
How severe is CVE-2025-1978? +
What products are affected by CVE-2025-1978? +
How do I check if I'm vulnerable to CVE-2025-1978? +
Related Vulnerabilities
Cursor is a code editor built for programming with AI. In versions prior to 3.0.0, the Cursor Desktop could execute …
Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including …
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default …
Actual is an open-source personal finance application. In the macOS desktop application version 25.x (built on Electron 39.2.7), the ELECTRON_RUN_AS_NODE …
zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment …
An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be …