CVE-2025-2902 - Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform

Back Back to CVE browser

HIGH

Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform

Published Jun 29, 2026

8.3

HIGH

CVSS 3.1

EPSS 0.35%

Description

Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform.

This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00; Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900: before DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00.

Affected products

Vendor Hitachi Product n/a Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00
- Version
  0
  Status
  affected
  Constraints
  <DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00
- Version
  0
  Status
  affected
  Constraints
  <DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Hitachi

n/a

unaffected

Version	Status	Constraints
0	affected	<DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00
0	affected	<DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00
0	affected	<DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00