coldbraid

CVE-2021-1498 Cisco HyperFlex HX

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.

CVSS
not scored

CWE-78

On CISA’s exploited list

Cisco HyperFlex HX Data Platform Command Injection Vulnerability

Added
2021-11-03
Federal patch deadline
2021-11-17
Ransomware use
not known