The flaw is a missing authentication requirement for a critical function in HiRDB Server, allowing an unauthenticated attacker to invoke this function. This could alter database state, reveal sensitive data, or provide a foothold for further exploitation. The vulnerability is classified as CWE‑306.

The issue affects Hitachi HiRDB Server Version 10 prior to 10‑12‑01, HiRDB Server Version 9 to 09‑66‑22, HiRDB Server with Additional Function Version 9 to 09‑66/V, HiRDB Server Version 9(32) from 09‑02 to 09‑66‑22, and HiRDB Server with Additional Function Version 9(32) up to 09‑66‑/V.

The CVSS score of 9.8 denotes critical severity; no EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. The missing authentication permits an attacker to call the critical function without credentials, which implies that a remote attacker that can reach the HiRDB Server service is likely to succeed. In the absence of mitigations, any exposed host could be vulnerable to unauthorized operations, potentially compromising data integrity and confidentiality.