PT-2026-38349 · Hitachi · One Block 28+23
CVE-2025-1978
·
Publicado
2026-05-07
·
Atualizado
2026-05-07
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Nome do Software Vulnerável e Versões Afetadas
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, One Block 23, One Block 24, One Block 26, One Block 28 versões anteriores a DKCMAIN Ver. 88-08-16-xx/00 e SVP Ver. 88-08-18-xx/00
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, One Block 23, One Block 24, One Block 26, One Block 28 versões anteriores a DKCMAIN Ver. 93-07-26-xx/00 e SVP Ver. 93-07-26-xx/00
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, One Block 23, One Block 24, One Block 26, One Block 28 versões anteriores a DKCMAIN Ver. A3-04-02-xx/00 e MPC Ver. A3-04-02-xx/00
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, One Block 23, One Block 24, One Block 26, One Block 28 versões anteriores a DKCMAIN Ver. A3-03-41-xx/00 e MPC Ver. A3-03-41-xx/00
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, One Block 23, One Block 24, One Block 26, One Block 28 versões anteriores a DKCMAIN Ver. A3-03-03-xx/00 e MPC Ver. A3-03-03-xx/00
Descrição
A execução remota de código é possível no Hitachi Storage Navigator e no console de manutenção.
Recomendações
Atualize para DKCMAIN Ver. 88-08-16-xx/00 e SVP Ver. 88-08-18-xx/00 ou posterior.
Atualize para DKCMAIN Ver. 93-07-26-xx/00 e SVP Ver. 93-07-26-xx/00 ou posterior.
Atualize para DKCMAIN Ver. A3-04-02-xx/00 e MPC Ver. A3-04-02-xx/00 ou posterior.
Atualize para DKCMAIN Ver. A3-03-41-xx/00 e MPC Ver. A3-03-41-xx/00 ou posterior.
Atualize para DKCMAIN Ver. A3-03-03-xx/00 e MPC Ver. A3-03-03-xx/00 ou posterior.
Correção
RCE
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
One Block 23
One Block 24
One Block 26
One Block 28
Storage Navigator
Virtual Storage Platform E1090
Virtual Storage Platform E1090H
Virtual Storage Platform E390
Virtual Storage Platform E390H
Virtual Storage Platform E590
Virtual Storage Platform E590H
Virtual Storage Platform E790
Virtual Storage Platform E790H
Virtual Storage Platform E990
Virtual Storage Platform F350
Virtual Storage Platform F370
Virtual Storage Platform F700
Virtual Storage Platform F900
Virtual Storage Platform G130
Virtual Storage Platform G150
Virtual Storage Platform G350
Virtual Storage Platform G370
Virtual Storage Platform G700
Virtual Storage Platform G900