CVE-2025-2514

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-2514
Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28  : before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00, before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00, before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00, before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00, before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_306.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hitachi:virtual_storage_one_block:23:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:24:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:26:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:28:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hitachi:vsp_g130_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g130:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:hitachi:vsp_g150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g150:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:hitachi:vsp_g350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g350:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:hitachi:vsp_g370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g370:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:hitachi:vsp_g700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g700:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:hitachi:vsp_g900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g900:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:hitachi:vsp_f350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f350:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:hitachi:vsp_f370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f370:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:hitachi:vsp_f700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f700:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:hitachi:vsp_f900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f900:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:hitachi:vsp_e390_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e390:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:hitachi:vsp_e590_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e590:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:hitachi:vsp_e790_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e790:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:hitachi:vsp_e990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e990:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:hitachi:vsp_e1090_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e1090:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:hitachi:vsp_e390h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e390h:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:hitachi:vsp_e590h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e590h:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:hitachi:vsp_e790h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e790h:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:hitachi:vsp_e1090h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e1090h:-:*:*:*:*:*:*:*
History

13 May 2026, 19:14

Type Values Removed Values Added
First Time Hitachi virtual Storage One Block
Hitachi vsp E1090 Firmware
Hitachi vsp G900 Firmware
Hitachi vsp E390h Firmware
Hitachi vsp E590
Hitachi
Hitachi vsp E1090
Hitachi vsp F370 Firmware
Hitachi vsp G370
Hitachi vsp G150 Firmware
Hitachi vsp E790 Firmware
Hitachi vsp F900
Hitachi vsp E590 Firmware
Hitachi vsp E590h
Hitachi vsp E390
Hitachi vsp F700 Firmware
Hitachi vsp F350
Hitachi vsp G130
Hitachi vsp G700 Firmware
Hitachi vsp E1090h Firmware
Hitachi vsp G150
Hitachi vsp E990
Hitachi vsp E790
Hitachi vsp G700
Hitachi vsp G900
Hitachi vsp F370
Hitachi vsp E1090h
Hitachi vsp E590h Firmware
Hitachi vsp E990 Firmware
Hitachi vsp E790h
Hitachi vsp G350 Firmware
Hitachi vsp F350 Firmware
Hitachi vsp E790h Firmware
Hitachi vsp E390h
Hitachi vsp G130 Firmware
Hitachi vsp F900 Firmware
Hitachi vsp G370 Firmware
Hitachi vsp F700
Hitachi vsp E390 Firmware
Hitachi vsp G350
CPE cpe:2.3:o:hitachi:vsp_f900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e390_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_f350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f350:-:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:23:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e790h:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e790_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e590_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f900:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:28:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e590h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e390h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g350:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e1090:-:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:24:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_f370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f700:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g150:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_f370:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e990:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e1090h:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g370:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e390h:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g900:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:virtual_storage_one_block:26:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g130_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_g350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g130:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e790:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e590:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e390:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_f700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e1090h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e1090_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_e590h:-:*:*:*:*:*:*:*
cpe:2.3:o:hitachi:vsp_e790h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:hitachi:vsp_g700:-:*:*:*:*:*:*:*
References () https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_306.html - () https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_306.html - Vendor Advisory

07 May 2026, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-07 09:16

Updated : 2026-05-13 19:14

NVD link : CVE-2025-2514

Mitre link : CVE-2025-2514

CVE.ORG link : CVE-2025-2514

JSON object : View

Products Affected

hitachi

  • vsp_e1090_firmware
  • vsp_e390_firmware
  • vsp_g350_firmware
  • vsp_e390h
  • vsp_e1090h_firmware
  • vsp_e1090
  • vsp_e990_firmware
  • vsp_e990
  • vsp_f370
  • vsp_f350_firmware
  • vsp_g150
  • vsp_e390
  • vsp_e590h_firmware
  • vsp_f700_firmware
  • vsp_f700
  • vsp_e590_firmware
  • vsp_e790
  • vsp_f900_firmware
  • vsp_e1090h
  • vsp_g350
  • vsp_e790h
  • vsp_g900
  • vsp_f350
  • vsp_e590
  • vsp_g700_firmware
  • vsp_g900_firmware
  • vsp_e790_firmware
  • vsp_e790h_firmware
  • vsp_f370_firmware
  • vsp_g370
  • virtual_storage_one_block
  • vsp_g370_firmware
  • vsp_f900
  • vsp_g130
  • vsp_g150_firmware
  • vsp_g700
  • vsp_e390h_firmware
  • vsp_e590h
  • vsp_g130_firmware
CWE
CWE-307

Improper Restriction of Excessive Authentication Attempts