Low 3.7Published Jun 29, 2026

CVE-2025-0824lack of validation for firmware update in Hitachi Virtual Storage

Updated under an hour ago (Oct 26, 2026, 9:00 PM ET)

Does this affect you?

It affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Hitachi Virtual Storage Platform One Block 23, 24, 26, 28

Exploited in the last 30 days

Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28. This issue affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.

CVSS: 3.7 LOW (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L
Weakness (CWE): CWE-347
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Hitachi
NVD analysis: Deferred
Record last updated: Jun 29, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28 hitachi:virtual_storage_platform_one_block_23_24_26_28 (from the name)	before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00; fixed at DKCMAIN A3-04-21-40/00, ESM A3-04-21/00	CNA record

References

References

https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_308.html	vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.