What’s Vulnerable › Vulnerabilities

CVE-2025-2514: Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachi Virtual Storage Platform

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-07 · updated 2026-06-17
• Weakness: CWE-307

Description

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00, before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00, before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00, before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00, before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00.

Affected products

• Hitachi Virtual Storage One Block: 23, 24, 26, 28
• Hitachi Vsp E1090 Firmware: all versions
• Hitachi Vsp E1090H Firmware: all versions
• Hitachi Vsp E390 Firmware: all versions
• Hitachi Vsp E390H Firmware: all versions
• Hitachi Vsp E590 Firmware: all versions
• Hitachi Vsp E590H Firmware: all versions
• Hitachi Vsp E790 Firmware: all versions
• Hitachi Vsp E790H Firmware: all versions
• Hitachi Vsp E990 Firmware: all versions
• Hitachi Vsp F350 Firmware: all versions
• Hitachi Vsp F370 Firmware: all versions
• Hitachi Vsp F700 Firmware: all versions
• Hitachi Vsp F900 Firmware: all versions
• Hitachi Vsp G130 Firmware: all versions
• Hitachi Vsp G150 Firmware: all versions
• Hitachi Vsp G350 Firmware: all versions
• Hitachi Vsp G370 Firmware: all versions
• Hitachi Vsp G700 Firmware: all versions
• Hitachi Vsp G900 Firmware: all versions

References

• https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_306.html

Get alerted when CVE-2025-2514 or the next vulnerability affects your stack