Paper/Archive/CVE-2025-9661

CVE-2025-9661

Hitachi Hitachi Virtual Storage Platform One Block 23 — OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28

EPSS 0.9%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 59.6.596 × 2011.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.

Affected

ProductAffectedFixed inSource

Hitachi Virtual Storage Platform One Block 23< DKCMAIN A3-04-21-40/00, ESM A3-04-21/00DKCMAIN A3-04-21-40/00, ESM A3-04-21/00CNA

Hitachi Virtual Storage Platform One Block 24< DKCMAIN A3-04-21-40/00, ESM A3-04-21/00DKCMAIN A3-04-21-40/00, ESM A3-04-21/00CNA

Hitachi Virtual Storage Platform One Block 26< DKCMAIN A3-04-21-40/00, ESM A3-04-21/00DKCMAIN A3-04-21-40/00, ESM A3-04-21/00CNA

Hitachi Virtual Storage Platform One Block 28< DKCMAIN A3-04-21-40/00, ESM A3-04-21/00DKCMAIN A3-04-21-40/00, ESM A3-04-21/00CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Hitachi (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refhitachi.com/products/it/storage-solutions/sec_info/2026/2026_309.html