Information Exposure Vulnerability in Hitachi Virtual Storage Platforms
CVE-2025-7386

6.8MEDIUM

Key Information:

Vendor

Hitachi
Status
Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100h, 5200h, 5500h, 5600h, Vx8
Hitachi Virtual Storage Platform G1000, G1500, F1500, Vx7
Vendor
CVE Published:
29 June 2026

What is CVE-2025-7386?

An information exposure vulnerability has been identified in Hitachi Virtual Storage Navigator, potentially allowing unauthorized access to sensitive information. This issue affects multiple models of Hitachi Virtual Storage Platforms, including the 5100, 5200, 5500, and G1000 series, prior to specific DKCMAIN and SVP firmware versions. Users are advised to upgrade to the latest firmware to mitigate associated risks.

Affected Version(s)

Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8 0

Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8 0

Hitachi Virtual Storage Platform G1000, G1500, F1500, VX7 0

References

https://www.hitachi.com/products/it/storage-solutions/sec...
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.