CVE-2025-7740CWE-1392

Use of default credentials vulnerability in Hitachi Energy SuprOS product

High · published January 28, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

Default credentials vulnerability exists in SuprOS

product. If exploited, this could allow an authenticated

local attacker to use an admin account created during

product deployment.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00166 · 5.6th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2026-01-28T09:02Z
EPSS history
Timeline
  • 28 JAN 09:02Z
    Use of default credentials vulnerability in Hitachi Energy SuprOS product
    cvelistv5