Low severity · published Jun 29, 2026
CVE-2025-0824
lack of validation for firmware update in Hitachi Virtual Storage
3.7
CVSS
0.1%
EPSS
No
On KEV
Description
Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28.
This issue affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HV
Hitachi Virtual Storage Platform One Block 23, 24, 26, 28 · Hitachi
before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00 · source: vendor
Affected product
HV
Hitachi Virtual Storage Platform One Block 23, 24, 26, 28
Hitachi