Improper Authorization Vulnerability in Hitachi Virtual Storage Platform Products
CVE-2025-2902

8.3HIGH

Key Information:

Vendor: Hitachi
Status: Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390h, E590h, E790h, E1090h; Hitachi Virtual Storage Platform 5100, 5500, 5100h, 5500h, 5200, 5600, 5200h, 5600h; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900
Vendor: CVE Published:; 29 June 2026

What is CVE-2025-2902?

An improper authorization vulnerability exists in the maintenance utility of Hitachi Virtual Storage Platform products. This flaw may allow an attacker to exploit the systems by gaining unauthorized access to sensitive configurations, potentially leading to a compromise of stored data and integrity issues within the storage infrastructure. It affects various models of the Hitachi Virtual Storage Platform before specified versions of the DKCMAIN and GUM components.

Affected Version(s)

Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H 0

Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H 0

Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 0

References

https://www.hitachi.com/products/it/storage-solutions/sec...

vendor-advisory

CVSS V3.1

Score:

8.3

Severity:

HIGH

Confidentiality:

Low

Integrity:

High

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 29, 2026
Vulnerability Reserved
Mar 28, 2025

CVE-2025-2902 Data

JSON