---
id: CVE-2025-9661
title: >-
  OS command injection vulneravility in the management gui (maintenance utility)
  of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.


  This issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28:
  before DKCMAIN A3…
summary: >-
  OS command injection vulneravility in the management gui (maintenance utility)
  of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.


  This issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28:
  before DKCMAIN A3…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-78
vendor: hitachi
product: virtual_storage_one_block
affected:
  - virtual_storage_one_block = 23
  - virtual_storage_one_block = 24
  - virtual_storage_one_block = 26
  - virtual_storage_one_block = 28
published: '2026-05-07'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-9661'
references:
  - url: >-
      https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_309.html
    label: hirt@hitachi.co.jp
tags:
  - nvd
epss: 0.009
epssPercentile: 0.586
ingestedAt: '2026-10-14T13:30:58.489Z'
---

## Overview

OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.

This issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.

## Affected

- `virtual_storage_one_block = 23`
- `virtual_storage_one_block = 24`
- `virtual_storage_one_block = 26`
- `virtual_storage_one_block = 28`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.