CVE-2025-7386
Deferred Deferred - Pending Action

Information Exposure in Hitachi Storage Navigator

Publication date: 2026-06-29

Last updated on: 2026-06-29

Assigner: Hitachi, Ltd.

Description
Information exposure vulnerability in Hitachi Storage Navigator. This issue affects Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8: before DKCMAIN Ver. 90-09-24-00/00, SVP Ver. 90-09-24/00, before DKCMAIN Ver. 90-08-86-00/00, SVP Ver. 90-08-86/00; Hitachi Virtual Storage Platform G1000, G1500, F1500, VX7: before DKCMAIN Ver. 80-06-96-00/00, SVP Ver. 80-06-91/00.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-29
Last Modified
2026-06-29
Generated
2026-07-19
AI Q&A
2026-06-29
EPSS Evaluated
2026-07-18
NVD
CVE-2025-7386
EUVD
EUVD-2025-210366

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
hitachi virtual_storage_platform to 90-09-24-00/00 (exc)
hitachi virtual_storage_platform to 80-06-96-00/00 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2025-7386 is an information exposure vulnerability in Hitachi Storage Navigator affecting multiple Hitachi Disk Array Systems when external authentication is used.

This flaw may expose authentication-related information but does not allow unauthorized access to the stored data itself.

The affected products include several models of Hitachi Virtual Storage Platform, such as G1000, G1500, F1500, 5100, 5200, 5500, 5600, and their H and VX series variants.

Detection Guidance

There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.

Impact Analysis

This vulnerability can lead to exposure of authentication-related information, which could potentially be used by attackers to gain insights into authentication mechanisms.

However, it does not allow attackers to access or modify the stored data directly.

The impact is primarily related to confidentiality of authentication information, which could increase the risk of further attacks if exploited.

Compliance Impact

The vulnerability exposes authentication-related information but does not allow unauthorized access to stored data.

There is no specific information provided about the impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

To mitigate the vulnerability CVE-2025-7386 in Hitachi Storage Navigator, it is recommended to update the micro-program to the fixed versions.

  • Update to DKCMAIN Ver.80-06-96-00/00 with SVP Ver.80-06-91/00
  • Update to DKCMAIN Ver.90-08-86-00/00 with SVP Ver.90-08-86/00
  • Update to DKCMAIN Ver.90-09-24-00/00 with SVP Ver.90-09-24/00

Users should verify they are referencing the latest security advisory information due to potential updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-7386. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart