CVE-2025-2902

Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform

State: Published
Severity: 8.3 High
Published: Jun 29, 2026
Updated: Jun 29, 2026
Reserved: Mar 28, 2025

Description

Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform.

This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00; Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900: before DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00.

Scores

CVSS	Score	Vector	Source
3.1	8.3 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H	Hitachi

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090HHitachi	before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00Affectedfrom DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00Not affected
Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600HHitachi	before DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00Affectedfrom DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00Not affected
Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900Hitachi	before DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00Affectedfrom DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00Not affected

References

https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_305.htmlvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.