Firetruck

CVE-2021-1497

KEV

Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

View CVE record →
Vendor / Project
Cisco
Product
HyperFlex HX
Date added
Nov 3, 2021
Due date
Nov 17, 2021
Known ransomware use
Unknown
CWEs
CWE-78

Description

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.

Required action

Apply updates per vendor instructions.

Notes