CVE-2025-2514

Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachi Virtual Storage Platform

State: Published
Severity: 5.3 Medium
Published: May 7, 2026
Updated: May 7, 2026
Reserved: Mar 19, 2025

Description

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28.

This issue affects Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00, before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00, before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00, before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00, before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	Hitachi

Weaknesses

CWE-307 Improper restriction of excessive authentication attempts

Affected Products

Product	Versions
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900Hitachi	before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00Affectedfrom DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00Not affected before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00Affectedfrom DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00Not affected before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00Affectedfrom DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00Not affected before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00Affectedfrom DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00Not affected before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00Affectedfrom DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00Not affected
Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090HHitachi	before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00Affectedfrom DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00Not affected before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00Affectedfrom DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00Not affected before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00Affectedfrom DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00Not affected before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00Affectedfrom DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00Not affected before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00Affectedfrom DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00Not affected
Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28Hitachi	before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00Affectedfrom DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00Not affected before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00Affectedfrom DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00Not affected before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00Affectedfrom DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00Not affected before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00Affectedfrom DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00Not affected before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00Affectedfrom DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00Not affected

References

https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_306.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.