This vulnerability (CVE-2025-2514) concerns improper restriction of excessive authentication attempts (CWE-307) in multiple Hitachi Virtual Storage Platform models including G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, and others. Affected versions are those before certain firmware versions (e.g., DKCMAIN Ver 88-08-16-xx/00 and others). The issue allows attackers to potentially perform unlimited authentication attempts, which could facilitate brute force attacks. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or remediation guidance is currently available from the vendor.

The vulnerability allows an attacker to make excessive authentication attempts without proper restriction, potentially enabling brute force attacks to guess credentials. The impact is limited to confidentiality as per the CVSS vector, with no integrity or availability impact reported. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should monitor authentication attempts and consider implementing external controls such as network-level rate limiting or multi-factor authentication where possible. Avoid relying solely on the affected device's internal authentication throttling mechanisms.