CVE-2025-2902 — Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform

Description (CNA)

Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00; Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900: before DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00.

Affected (CNA)

Vendor / product	Versions
Hitachi / Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H	affected 0 before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00
Hitachi / Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H	affected 0 before DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00
Hitachi / Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900	affected 0 before DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00

CWE

CWE-862

References

https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_305.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.