Log in Start free

Vulnerability · Published May 7, 2026 · Assigned by Hitachi

CVE-2025-2514Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachi Virtual Storage Platform

Medium 5.3

In plain English

A medium-severity security flaw in Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.3%top 77.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00, before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00, before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00, before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00, before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00.

Affected products (as reported)

VendorProductVersions
Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 0 – before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/000 – before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/000 – before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/000 – before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/000 – before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00
Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H 0 – before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/000 – before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/000 – before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/000 – before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/000 – before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00
Hitachi Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 0 – before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/000 – before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/000 – before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/000 – before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/000 – before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00

Weakness: CWE-307 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References