9.8
Critique
Exploitée
CVE-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-78
Description
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco HyperFlex HX Data Platform | Versions non publiées |
Références
- 20210505 Cisco HyperFlex HX Command Injection Vulnerabilities tools.cisco.com
- packetstormsecurity.com packetstormsecurity.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Cisco HyperFlex HX Data Platform
Les 6 CVE de Cisco HyperFlex HX Data Platform →
CVE-2023-20263
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an…
4.7
Moyenne
CVE-2021-1499
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an…
5.3
Moyenne
CVE-2021-1497
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
9.8
Critique
CVE-2020-3389
A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated,…
4.4
Moyenne