---
id: CVE-2025-0824
title: "Lack of validation for firmware update\_in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28.\n\nThis issue affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00."
summary: "Lack of validation for firmware update\_in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28.\n\nThis issue affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00."
severity: low
cvss: 3.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L'
cwe:
  - CWE-347
published: '2026-06-29'
updated: '2026-06-29'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-0824'
references:
  - url: >-
      https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_308.html
    label: hirt@hitachi.co.jp
tags:
  - nvd
ingestedAt: '2026-06-29T13:42:12.355Z'
epss: 0.00129
epssPercentile: 0.02889
---

## Overview

Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28.

This issue affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.