{"id":"CVE-2025-9661","title":"OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.\n\nThis issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3…","summary":"OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.\n\nThis issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"hitachi","product":"virtual_storage_one_block","affected":["virtual_storage_one_block = 23","virtual_storage_one_block = 24","virtual_storage_one_block = 26","virtual_storage_one_block = 28"],"published":"2026-05-07","updated":"2026-10-14","sourceUpdated":"2026-10-14T13:10:00.187","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-9661","references":[{"url":"https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_309.html","label":"hirt@hitachi.co.jp"}],"tags":["nvd"],"epss":0.009,"epssPercentile":0.586,"ingestedAt":"2026-10-14T13:30:58.489Z","slug":"CVE-2025-9661","body":"## Overview\n\nOS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.\n\nThis issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.\n\n## Affected\n\n- `virtual_storage_one_block = 23`\n- `virtual_storage_one_block = 24`\n- `virtual_storage_one_block = 26`\n- `virtual_storage_one_block = 28`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}