This vulnerability (CVE-2025-2902) in Hitachi Virtual Storage Platform products is classified as CWE-862 (Missing Authorization). It affects the maintenance utility component across multiple platform models including E390, E590, E790, E990, E1090 series and others, as well as the 5100, 5500, 5200, 5600, and G130 through F900 series. The affected versions are those before certain DKCMAIN and GUM versions specified in the description. The flaw allows an attacker with low privileges to bypass authorization controls, potentially leading to unauthorized modification or disruption of system integrity and availability. The vulnerability has a CVSS score of 8.3, reflecting its high impact and ease of exploitation over the network without user interaction. No official remediation or patch information is provided in the source data.

Successful exploitation could allow an attacker with low privileges to perform unauthorized actions on the maintenance utility, potentially compromising system integrity and availability. Confidentiality impact is limited to low. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation level or patch links are provided, users should monitor Hitachi's advisories for updates. Until a fix is available, restrict access to the maintenance utility to trusted administrators only and apply strict access controls to limit exposure.