ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2025-1978

Hitachi Virtual Storage Platform E390Hitachi Virtual Storage Platform G130Hitachi Virtual Storage Platform One Block 23

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console

CVSS 3.1
8.3بالا

شرح رسمی (انگلیسی)

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

امتیازهای CVSS

امتیازنسخهمنبعبردار
8.3بالا 3.1 CVEProject cvelistV5 (CNA) (Hitachi) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H v < DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H v < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H v < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H v < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H v < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 v < DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 v < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 v < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 v < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 v < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 v < DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 v < DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 v < DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 v < DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 v < DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۲/۱۷
آخرین به‌روزرسانی
۱۴۰۵/۰۲/۱۷
وضعیت
منتشرشده
صادرکننده (CNA)
Hitachi

پیش‌بینی بهره‌برداری (EPSS)

۰٫۵۴٪
احتمال بهره‌برداری در ۳۰ روز
۴۶٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-94
    Improper Control of Generation of Code ('Code Injection')