High severity · published Jan 28, 2026
CVE-2025-7740
Use of default credentials vulnerability in Hitachi Energy SuprOS product
8.8
CVSS
0.2%
EPSS
No
On KEV
Description
Default credentials vulnerability exists in SuprOS
product. If exploited, this could allow an authenticated
local attacker to use an admin account created during
product deployment.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
SuprOS · Hitachi Energy
9.0.0 through 9.2.2.0 · source: vendor