Is CVE-2025-1978 actively exploited?

No active exploitation of CVE-2025-1978 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-1978 be exploited remotely?

Yes. CVE-2025-1978 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-1978?

CVE-2025-1978 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2025-1978

CRITICAL

CVE-2025-1978

CWE-94Published: May 7, 2026· Updated: May 13, 2026

9.8

CVSS v3.1

EPSS:0.22%probability of exploitation in 30 daysPercentile:44.3th

Official Description

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28.

This issue affects Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver. 88-08-16-xx/00, SVP Ver. 88-08-18-xx/00, before DKCMAIN Ver. 93-07-26-xx/00, SVP Ver. 93-07-26-xx/00, before DKCMAIN Ver. A3-04-02-xx/00, MPC Ver. A3-04-02-xx/00, before DKCMAIN Ver. A3-03-41-xx/00, MPC Ver. A3-03-41-xx/00, before DKCMAIN Ver. A3-03-03-xx/00, MPC Ver. A3-03-03-xx/00.

NVD Source

Technical Analysis

CVE-2025-1978 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

hitachi39 products

virtual storage one blockvsp g130 firmwarevsp g130vsp g150 firmwarevsp g150vsp g350 firmwarevsp g350vsp g370 firmwarevsp g370vsp g700 firmwarevsp g700vsp g900 firmware+27 more

Source: NVD CPE · 42 total CPE entries