Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Hitachi — Vulnerabilities & Security Advisories 76

Browse all 76 CVE security advisories affecting Hitachi. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Hitachi operates as a global conglomerate with core business segments spanning industrial systems, information technology, and energy solutions. Its extensive portfolio includes critical infrastructure components, such as power grid management systems and industrial automation controllers, which serve as high-value targets for state-sponsored actors and criminal syndicates. Historical vulnerability data indicates a prevalence of remote code execution (RCE) and cross-site scripting (XSS) flaws, often stemming from legacy embedded software architectures and insufficient input validation in web-facing management interfaces. Additionally, privilege escalation vulnerabilities have been documented, allowing attackers to bypass access controls on administrative panels. While no single catastrophic breach has defined the company’s public security narrative, the sheer volume of recorded CVEs highlights systemic challenges in securing diverse, long-lifecycle industrial IoT devices. This landscape necessitates rigorous patch management and network segmentation to mitigate risks associated with its broad technological footprint.

CVE ID Title CVSS Severity Published
CVE-2026-71377 Command Argument Injection Vulnerability in Cosminexus Component Container — Cosminexus Component Container CWE-88 9.8 Critical 2026-09-08
CVE-2026-71376 OS Command Injection Vulnerability in Cosminexus Component Container — Cosminexus Component Container CWE-78 9.8 Critical 2026-09-08
CVE-2026-71375 XXE Vulnerability in Cosminexus Component Container — Cosminexus Component Container CWE-611 7.4 High 2026-09-08
CVE-2026-71374 Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container — Cosminexus Component Container CWE-502 9.8 Critical 2026-09-08
CVE-2025-2902 Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform — Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H CWE-862 8.3 High 2026-06-29
CVE-2025-0824 lack of validation for firmware update in Hitachi Virtual Storage — Hitachi Virtual Storage Platform One Block 23, 24, 26, 28 CWE-347 3.7 Low 2026-06-29
CVE-2025-7386 Information exposure vulnerability in Hitachi Storage Navigator — Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8 CWE-522 6.8 Medium 2026-06-29
CVE-2025-7737 DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform — Hitachi Virtual Storage Platform E990, E1090, E1090H CWE-770 8.6 High 2026-06-19
CVE-2026-3314 Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint — Hitachi Ops Center Analyzer CWE-549 4.6 Medium 2026-05-26
CVE-2025-1978 Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console — Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 CWE-94 8.3 High 2026-05-07
CVE-2025-2514 Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachi Virtual Storage Platform — Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 CWE-307 5.3 Medium 2026-05-07
CVE-2025-9661 OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28 — Hitachi Virtual Storage Platform One Block 23 CWE-78 8.1 High 2026-05-07
CVE-2025-65116 Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM — JP1/IT Desktop Management 2 - Manager CWE-763 5.5 Medium 2026-04-07
CVE-2025-65115 Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM — JP1/IT Desktop Management 2 - Manager CWE-73 8.8 High 2026-04-07
CVE-2026-2072 Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer — Hitachi Infrastructure Analytics Advisor CWE-79 8.2 High 2026-03-25
CVE-2026-1166 Open Redirect Vulnerability in Hitachi Ops Center Administrator — Hitachi Ops Center Administrator CWE-601 4.3 Medium 2026-03-25
CVE-2025-0976 Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager — Hitachi Ops Center API Configuration Manager CWE-532 4.7 Medium 2026-02-25
CVE-2025-5781 Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager — Hitachi Ops Center API Configuration Manager CWE-532 5.2 Medium 2026-02-25
CVE-2025-66444 Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer — Hitachi Infrastructure Analytics Advisor CWE-79 8.2 High 2025-12-24
CVE-2025-66445 Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer — Hitachi Infrastructure Analytics Advisor CWE-306 7.1 High 2025-12-24
CVE-2025-3624 Missing Authorization Vulnerability in Hitachi Ops Center Analyzer — Hitachi Ops Center Analyzer CWE-862 4.3 Medium 2025-05-16
CVE-2024-8201 Cross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer — Hitachi Ops Center Analyzer CWE-1385 5.4 Medium 2025-05-16
CVE-2025-1531 Authentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint OVF — Hitachi Ops Center Analyzer viewpoint CWE-1392 6.5 Medium 2025-05-16
CVE-2025-1245 Bypass Connection Restriction Vulnerability in Hitachi Ops Center Analyzer — Hitachi Infrastructure Analytics Advisor CWE-348 6.5 Medium 2025-05-16
CVE-2025-27525 Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager — JP1/IT Desktop Management 2 - Smart Device Manager CWE-525 3.9 Low 2025-05-15
CVE-2025-27524 Weak encryption vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager — JP1/IT Desktop Management 2 - Smart Device Manager CWE-326 5.3 Medium 2025-05-15
CVE-2025-27523 XXE vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager — JP1/IT Desktop Management 2 - Smart Device Manager CWE-611 8.7 High 2025-05-15
CVE-2024-46899 Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF — Hitachi Ops Center Common Services CWE-1392 7.1 High 2025-04-22
CVE-2025-2300 Information exposure vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA — Hitachi Ops Center Common Services CWE-532 5.5 Medium 2025-04-22
CVE-2024-57964 Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program — HVAC Energy Saving Program CWE-427 7.3 High 2025-02-18

This page lists every published CVE security advisory associated with Hitachi. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.