---
id: CVE-2025-2902
title: >-
  Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual
  Storage Platform.


  This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990,
  E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver
summary: >-
  Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual
  Storage Platform.


  This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990,
  E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-2…
severity: high
cvss: 8.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H'
cwe:
  - CWE-862
published: '2026-06-29'
updated: '2026-06-29'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-2902'
references:
  - url: >-
      https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_305.html
    label: hirt@hitachi.co.jp
tags:
  - nvd
ingestedAt: '2026-06-29T13:42:12.357Z'
epss: 0.0035
epssPercentile: 0.28753
---

## Overview

Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform.

This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-26/00; Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, 5200, 5600, 5200H, 5600H: before DKCMAIN Ver. 90-09-27-00/00, GUM Ver. 90-09-27/00; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900: before DKCMAIN Ver. 88-08-16-xx/00, GUM Ver. 88-08-20/00.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.