جزئیات آسیب‌پذیری

CVE-2025-7737

Hitachi Virtual Storage Platform E390Hitachi Virtual Storage Platform E990Hitachi Virtual Storage Platform G100Hitachi Virtual Storage Platform G130Hitachi Virtual Storage Platform VX7Hitachi Virtual Storage Platform VX8

DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform

CVSS 3.1
8.6بالا

شرح رسمی (انگلیسی)

DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E990, E1090, E1090H: before DKCMAIN Ver.93-07-21-80/00-05, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-07-01-80/00-07, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-06-82-80/00-06, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-06-63-80/00-04, CHB(iSCSI) Ver.88-01-02-04; Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H: before DKCMAIN Ver.93-07-21-x0/00-05, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-07-01-x0/00-07, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-06-82-x0/00-06, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-06-63-x0/00-04, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-07-24-x0/00-02, CHB(iSCSI) Ver.88-01-02-04, before DKCMAIN Ver.93-07-02-x0/00-02, CHB(iSCSI) Ver.88-01-02-04; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900: before DKCMAIN Ver.88-08-10-x0/00-05, CHB(iSCSI) Ver.88-01-02-04; Hitachi Virtual Storage Platform G100, G200, G400, G600, G800, F400, F600, F800: before DKCMAIN Ver.83-06-20-x0/00-05, CHB(iSCSI) Ver.83-01-01-29; Hitachi Virtual Storage Platform VX8, 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver.90-09-01-00/01-01, CHB(iSCSI) Ver.90-01-01-07, before DKCMAIN Ver.90-08-83-00/01-01, CHB(iSCSI) Ver.90-01-01-07, before DKCMAIN Ver.90-08-63-00/01-01, CHB(iSCSI) Ver.90-01-01-07; Hitachi Virtual Storage Platform VX7, G1000, G1500, F1500: before DKCMAIN Ver.80-06-93-00/00-04, ISFC Ver.80-01-17.

امتیازهای CVSS

امتیازنسخهمنبعبردار
8.6بالا 3.1 CVEProject cvelistV5 (CNA) (Hitachi) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H v < DKCMAIN Ver.93-06-82-x0/00-06, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H v < DKCMAIN Ver.93-06-63-x0/00-04, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H v < DKCMAIN Ver.93-07-24-x0/00-02, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H v < DKCMAIN Ver.93-07-02-x0/00-02, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H v < DKCMAIN Ver.93-07-21-x0/00-05, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E390H, E590H, E790H v < DKCMAIN Ver.93-07-01-x0/00-07, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E990, E1090, E1090H v < DKCMAIN Ver.93-07-21-80/00-05, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E990, E1090, E1090H v < DKCMAIN Ver.93-07-01-80/00-07, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E990, E1090, E1090H v < DKCMAIN Ver.93-06-82-80/00-06, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform E990, E1090, E1090H v < DKCMAIN Ver.93-06-63-80/00-04, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform G100, G200, G400, G600, G800, F400, F600, F800 v < DKCMAIN Ver.83-06-20-x0/00-05, CHB(iSCSI) Ver.83-01-01-29 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 v < DKCMAIN Ver.88-08-10-x0/00-05, CHB(iSCSI) Ver.88-01-02-04 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform VX7, G1000, G1500, F1500 v < DKCMAIN Ver.80-06-93-00/00-04, ISFC Ver.80-01-17 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform VX8, 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H v < DKCMAIN Ver.90-09-01-00/01-01, CHB(iSCSI) Ver.90-01-01-07 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform VX8, 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H v < DKCMAIN Ver.90-08-83-00/01-01, CHB(iSCSI) Ver.90-01-01-07 CVEProject cvelistV5 (CNA)
Hitachi Hitachi Virtual Storage Platform VX8, 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H v < DKCMAIN Ver.90-08-63-00/01-01, CHB(iSCSI) Ver.90-01-01-07 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۳/۲۹
آخرین به‌روزرسانی
۱۴۰۵/۰۴/۰۱
وضعیت
منتشرشده
صادرکننده (CNA)
Hitachi

پیش‌بینی بهره‌برداری (EPSS)

۰٫۴۶٪
احتمال بهره‌برداری در ۳۰ روز
۴۰٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-770
    Allocation of resources without limits or throttling