Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2021-1498

Cisco HyperFlex HX Data Platform Command Injection Vulnerability

Description

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 17 Nov 2021.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.