CVE Watch—

CVE-2021-1497

Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

99.9%

p100

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 dias99.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Cisco / HyperFlex HX

Vulnerabilidade

Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

17 de nov. de 2021

Uso conhecido em ransomware

Não

Descrição resumida

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-1497

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-1498—

100.0%

KEV—80Cisco HyperFlex HX Data Platform Command Injection Vulnerability—