CVE-2025-2514

Description

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00, before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00, before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00, before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00, before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00.

CVSS 3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.30% probability · 23th percentile

CISA KEV

Not listed

Weakness

CWE-307

Affected

hitachi/vsp e1090h firmware · hitachi/vsp e790h firmware · hitachi/vsp e590h firmware · hitachi/vsp e390h firmware · hitachi/vsp e1090 firmware · hitachi/vsp e990 firmware · hitachi/vsp e790 firmware · hitachi/vsp e590 firmware · hitachi/vsp e390 firmware · hitachi/vsp f900 firmware · hitachi/vsp f700 firmware · hitachi/vsp f370 firmware · hitachi/vsp f350 firmware · hitachi/vsp g900 firmware · hitachi/vsp g700 firmware · hitachi/vsp g370 firmware · hitachi/vsp g350 firmware · hitachi/vsp g150 firmware · hitachi/vsp g130 firmware · hitachi/virtual storage one block

Source

hirt@hitachi.co.jp

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.