Skip to content
OpenAdvisories
High · 8.1 CVE-2025-9661 EUVD-2025-209708GHSA-4xr5-xgm7-4447

OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28

Published May 7, 2026 · Updated May 7, 2026 · Assigned by Hitachi

Description

OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.

This issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.

Affected products

VendorProductAffectedFixed
Hitachi Hitachi Virtual Storage Platform One Block 23 < DKCMAIN A3-04-21-40/00, ESM A3-04-21/00 DKCMAIN A3-04-21-40/00, ESM A3-04-21/00
Hitachi Hitachi Virtual Storage Platform One Block 24 < DKCMAIN A3-04-21-40/00, ESM A3-04-21/00 DKCMAIN A3-04-21-40/00, ESM A3-04-21/00
Hitachi Hitachi Virtual Storage Platform One Block 26 < DKCMAIN A3-04-21-40/00, ESM A3-04-21/00 DKCMAIN A3-04-21-40/00, ESM A3-04-21/00
Hitachi Hitachi Virtual Storage Platform One Block 28 < DKCMAIN A3-04-21-40/00, ESM A3-04-21/00 DKCMAIN A3-04-21-40/00, ESM A3-04-21/00

Advisories 1

References