This vulnerability (CVE-2025-1978) involves improper control of code generation (CWE-94) in Hitachi Virtual Storage Platform models G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, and others, including maintenance consoles. It allows remote attackers to execute arbitrary code without requiring privileges or user interaction. The issue affects versions prior to specified firmware releases (e.g., DKCMAIN Ver. 88-08-16-xx/00 and others). The CVSS 3.1 score is 8.3 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L), reflecting network attack vector, low attack complexity, no privileges or user interaction needed, and impacts on confidentiality, integrity, and availability. No patch or official remediation level is currently documented.

Successful exploitation could allow remote attackers to execute arbitrary code on affected Hitachi Virtual Storage Platforms, potentially leading to partial compromise of confidentiality, integrity, and availability of the storage systems. This could disrupt storage operations or allow unauthorized data access or modification. The vulnerability is rated high severity with a CVSS score of 8.3. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should restrict network access to affected management interfaces and monitor for unusual activity. Follow Hitachi's official advisories for updates and apply patches promptly once available.