CVE-2025-2514 — MEDIUM (5.3)

Vulnerability Description

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28. This issue affects Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H, Hitachi Virtual Storage Platform One Block 23, One Block 24, One Block 26, One Block 28 : before DKCMAIN Ver 88-08-16-xx/00, GUM Ver. 88-08-20/00, before DKCMAIN Ver 93-07-26-xx/00, GUM Ver. 93-07-26/00, before DKCMAIN Ver A3-04-02-xx/00, EMS Ver. A3-04-02/00, before DKCMAIN Ver A3-03-41-xx/00, EMS Ver. A3-03-41/00, before DKCMAIN Ver A3-03-03-xx/00, EMS Ver. A3-03-02/00.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Hitachi	Virtual Storage One Block	23
Hitachi	Vsp G130 Firmware	-
Hitachi	Vsp G130	-
Hitachi	Vsp G150 Firmware	-
Hitachi	Vsp G150	-
Hitachi	Vsp G350 Firmware	-
Hitachi	Vsp G350	-
Hitachi	Vsp G370 Firmware	-
Hitachi	Vsp G370	-
Hitachi	Vsp G700 Firmware	-
Hitachi	Vsp G700	-
Hitachi	Vsp G900 Firmware	-
Hitachi	Vsp G900	-
Hitachi	Vsp F350 Firmware	-
Hitachi	Vsp F350	-
Hitachi	Vsp F370 Firmware	-
Hitachi	Vsp F370	-
Hitachi	Vsp F700 Firmware	-
Hitachi	Vsp F700	-
Hitachi	Vsp F900 Firmware	-

Related Weaknesses (CWE)

CWE-307

References

https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_306.htmVendor Advisory

FAQ

What is CVE-2025-2514?

CVE-2025-2514 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi Virtual Storage Platform...

How severe is CVE-2025-2514?

CVE-2025-2514 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-2514?

Check the references section above for vendor advisories and patch information. Affected products include: Hitachi Virtual Storage One Block, Hitachi Vsp G130 Firmware, Hitachi Vsp G130, Hitachi Vsp G150 Firmware, Hitachi Vsp G150.