CVE-2025-2902CWE-862

Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform

High · published June 29, 2026

CVSS v3.1
8.3
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform.

This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00; Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900: before DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-06-29T05:52Z
EPSS history
Timeline
  • 29 JUN 05:52Z
    Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform
    cvelistv5