The CVE identifies a remote code execution flaw (CWE-94) in the Storage Navigator and maintenance console of Hitachi Virtual Storage Platform devices. While the description does not detail the exact cause, it is inferred that the flaw arises from improper handling of code execution requests, allowing an attacker to run arbitrary code on the affected systems. This leads to compromise of confidentiality, integrity, and availability, potentially giving full control over the devices.

The vulnerability affects a broad range of Hitachi Virtual Storage Platform models, including G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H and One Block 23, One Block 24, One Block 26, One Block 28. All firmware versions prior to DKCMAIN Ver. 88‑08‑16‑xx/00, SVP Ver. 88‑08‑18‑xx/00, DKCMAIN Ver. 93‑07‑26‑xx/00, SVP Ver. 93‑07‑26‑xx/00, DKCMAIN Ver. A3‑04‑02‑xx/00, MPC Ver. A3‑04‑02‑xx/00, DKCMAIN Ver. A3‑03‑41‑xx/00, MPC Ver. A3‑03‑41‑xx/00, DKCMAIN Ver. A3‑03‑03‑xx/00, and MPC Ver. A3‑03‑03‑xx/00 are affected.

The CVSS score of 8.3 indicates high severity. An EPSS score is not available, and the absence of a KEV listing suggests the vulnerability is not yet widely used. The attack vector is inferred to be remote through the management interfaces, as the vulnerability affects the Storage Navigator and maintenance console; the exploit does not require local privileged access. Thus, an attacker who gains access to the console could execute arbitrary commands, leading to full takeover of the storage platform.