9.8
Critical
Exploited
CVE-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-78
Description
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco HyperFlex HX Data Platform | Versions not published |
References
- 20210505 Cisco HyperFlex HX Command Injection Vulnerabilities tools.cisco.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Cisco HyperFlex HX Data Platform
The 6 CVEs of Cisco HyperFlex HX Data Platform →
CVE-2023-20263
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an…
4.7
Medium
CVE-2021-1499
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an…
5.3
Medium
CVE-2021-1497
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
9.8
Critical
CVE-2020-3389
A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated,…
4.4
Medium