CVE-2025-0824: lack of validation for firmware update in Hitachi Virtual Storage
Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28.
This issue affects Hitachi Virtual Storage Platform One Block 23, 24, 26, 28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Hitachi Virtual Storage Platform One Block 23, 24, 26, 28to a version that resolves this vulnerability.Fixed in DKCMAIN A3-04-21-40/00 - Upgrade
Upgrade
Hitachi Virtual Storage Platform One Block 23, 24, 26, 28to a version that resolves this vulnerability.Fixed in ESM A3-04-21/00
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0824?
The severity of CVE-2025-0824 is classified as low, with a score of 3.7.
What is the risk associated with CVE-2025-0824?
CVE-2025-0824 has a risk score of 25 and involves a vulnerability in the firmware update process.
How can I fix CVE-2025-0824?
To mitigate CVE-2025-0824, ensure that you update to the firmware version DKCMAIN A3-04-21-40/00 or later and ESM A3-04-21/00 or later.
Which systems are affected by CVE-2025-0824?
CVE-2025-0824 affects the Hitachi Virtual Storage Platform One Block models 23, 24, 26, and 28.
What is the nature of the vulnerability in CVE-2025-0824?
CVE-2025-0824 is characterized by a lack of validation for firmware updates in the affected Hitachi Virtual Storage systems.