CVE-2025-2514mediumCWE-307

CVE-2025-2514: medium-severity vulnerability in Hitachi Virtual Storage Platform G130, G150…

Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachi Virtual Storage Platform

Published

Follow this CVE+ Monitor Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H+ Monitor Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.3%
Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00, before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00, before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00, before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00, before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Hitachi · Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090HHitachi · Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900Hitachi · Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28
Related CVEs — Hitachi Virtual Storage Platform G130, G150…

In the same product, most dangerous first.

CVE-2025-1978HIGHRemote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance consoleEPSS 0.5%CVE-2022-36407CRITICALInformation Exposure Vulnerability in Hitachi Disk Array SystemsEPSS 0.5%CVE-2025-7737HIGHDoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage PlatformEPSS 0.5%CVE-2025-2902HIGHImproper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage PlatformEPSS 0.4%