This vulnerability (CVE-2025-0824) affects Hitachi Virtual Storage Platform One Block 23, 24, 26, and 28 models due to improper verification of cryptographic signatures on firmware updates, classified under CWE-347. The issue arises from a lack of validation of firmware updates prior to firmware versions DKCMAIN A3-04-21-40/00 and ESM A3-04-21/00. The CVSS 3.1 base score is 3.7, reflecting low severity with network attack vector, high attack complexity, low privileges required, user interaction needed, and impacts limited to integrity and availability. No vendor advisory or patch information is available to confirm remediation status.

The vulnerability could allow an attacker with network access and low privileges, requiring user interaction, to cause limited integrity and availability impacts by exploiting improper cryptographic signature verification during firmware updates. This may lead to unauthorized or malicious firmware being accepted, potentially affecting device operation or stability. However, no confirmed exploits are known, and the impact is rated low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or mitigation is provided by Hitachi, users should follow standard security practices for firmware updates, such as verifying update sources and applying updates only from trusted channels. Monitor vendor communications for updates on patches or official mitigations.