CVE-2025-9661 - Vulnerability Analysis

Overview

Hitachi Virtual Storage Platform One Block 23, 24, 26, and 28 before DKCMAIN A3-04-21-40/00 and ESM A3-04-21/00 contain a command injection caused by improper input handling in the management GUI maintenance utility, letting attackers execute OS commands remotely, exploit requires network access to the management GUI.

Severity & Score

Impact

Attackers can execute arbitrary OS commands remotely, potentially leading to full system compromise.

Mitigation

Update to DKCMAIN A3-04-21-40/00 and ESM A3-04-21/00 or later.

References

• https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_309.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner