CVE-2025-2902
Description
Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00; Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900: before DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00.
How to fix
- Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090HDKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00 or later
- Hitachi Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600HDKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00 or later
- Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Hitachi Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H | v < DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00 | DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00 |
| Hitachi Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H | v < DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00 | DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00 |
| Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 | v < DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00 | DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.